Create policy
Manage columns
Customer managed
Filter policies
Reset filters
Policy type
Policy use
Showing 634 results
 
Policy name
Type
Attachments
Used as
Creation time
Edited time
Description
AccessAnalyzerServiceRolePolicy
AWS managed
0
None
2019-12-02 09:13 PST
2020-03-02 07:55 PST
Allow Access Analyzer to analyze resource metadata
AdministratorAccess
Job function
4
Permissions policy (4)
2015-02-06 10:39 PST
2015-02-06 10:39 PST
Provides full access to AWS services and resources.
AlexaForBusinessDeviceSetup
AWS managed
0
None
2017-11-30 08:47 PST
2019-05-20 14:05 PST
Provide device setup access to AlexaForBusiness services
AlexaForBusinessFullAccess
AWS managed
0
None
2017-11-30 08:47 PST
2019-05-20 14:32 PST
Grants full access to AlexaForBusiness resources and access to related AWS Services
AlexaForBusinessGatewayExecution
AWS managed
0
None
2017-11-30 08:47 PST
2017-11-30 08:47 PST
Provide gateway execution access to AlexaForBusiness services
AlexaForBusinessNetworkProfileServicePolicy
AWS managed
0
None
2019-03-12 17:53 PST
2019-04-05 14:57 PST
This policy enables Alexa for Business to perform automated tasks scheduled by your network profiles.
AlexaForBusinessPolyDelegatedAccessPolicy
AWS managed
0
None
2019-10-16 12:48 PST
2019-10-16 12:48 PST
Provide access to Poly AVS devices
AlexaForBusinessReadOnlyAccess
AWS managed
0
None
2017-11-30 08:47 PST
2019-11-19 16:25 PST
Provide read only access to AlexaForBusiness services
AmazonAPIGatewayAdministrator
AWS managed
0
None
2015-07-09 10:34 PST
2015-07-09 10:34 PST
Provides full access to create/edit/delete APIs in Amazon API Gateway via the AWS Management Console.
AmazonAPIGatewayInvokeFullAccess
AWS managed
0
None
2015-07-09 10:36 PST
2018-12-18 10:25 PST
Provides full access to invoke APIs in Amazon API Gateway.
AmazonAPIGatewayPushToCloudWatchLogs
AWS managed
1
Permissions policy (1)
2015-11-11 15:41 PST
2015-11-11 15:41 PST
Allows API Gateway to push logs to user's account.
AmazonAppStreamFullAccess
AWS managed
0
None
2015-02-06 10:40 PST
2019-08-07 12:27 PST
Provides full access to Amazon AppStream via the AWS Management Console.
AmazonAppStreamReadOnlyAccess
AWS managed
0
None
2015-02-06 10:40 PST
2016-12-07 13:00 PST
Provides read only access to Amazon AppStream via the AWS Management Console.
AmazonAppStreamServiceAccess
AWS managed
0
None
2016-11-18 20:17 PST
2019-08-07 11:29 PST
Default policy for Amazon AppStream service role.
AmazonAthenaFullAccess
AWS managed
0
None
2016-11-30 08:46 PST
2019-08-08 10:52 PST
Provide full access to Amazon Athena and scoped access to the dependencies needed to enable querying, writing results, and data management.
AmazonAugmentedAIFullAccess
AWS managed
0
None
2019-12-03 08:21 PST
2019-12-03 08:21 PST
Provides access to perform all operations Amazon Augmented AI resources, including FlowDefinitions, HumanTaskUis and HumanLoops. Does not allow access for creating FlowDefinitions against the public-crowd Workteam.
AmazonAugmentedAIHumanLoopFullAccess
AWS managed
0
None
2019-12-03 08:20 PST
2019-12-03 08:20 PST
Provides access to perform all operations on HumanLoops.
AmazonChimeFullAccess
AWS managed
0
None
2017-11-01 15:15 PST
2017-11-01 15:15 PST
Provides full access to Amazon Chime Admin Console via the AWS Management Console.
AmazonChimeReadOnly
AWS managed
0
None
2017-11-01 15:04 PST
2019-11-18 10:49 PST
Provides read only access to Amazon Chime Admin Console via the AWS Management Console.
AmazonChimeSDK
AWS managed
0
None
2020-02-04 13:53 PST
2020-02-04 13:53 PST
Provides access to Amazon Chime SDK operations
AmazonChimeServiceRolePolicy
AWS managed
0
None
2019-09-30 15:25 PST
2019-09-30 15:25 PST
Enables access to AWS Resources used or managed by Amazon Chime
AmazonChimeUserManagement
AWS managed
0
None
2017-11-01 15:17 PST
2020-02-18 11:26 PST
Provides user management access to Amazon Chime Admin Console via the AWS Management Console.
AmazonChimeVoiceConnectorServiceLinkedRolePolicy
AWS managed
0
None
2019-09-30 15:16 PST
2019-09-30 15:16 PST
Managed policy for Service Linked Role for Amazon Chime VoiceConnector
AmazonCloudDirectoryFullAccess
AWS managed
0
None
2017-02-24 16:41 PST
2017-02-24 16:41 PST
Provides full access to Amazon Cloud Directory Service.
AmazonCloudDirectoryReadOnlyAccess
AWS managed
0
None
2017-02-28 15:42 PST
2017-02-28 15:42 PST
Provides read only access to Amazon Cloud Directory Service.
AmazonCodeGuruProfilerFullAccess
AWS managed
0
None
2019-12-03 02:13 PST
2019-12-03 02:13 PST
Provides full access to Amazon CodeGuru Profiler.
AmazonCodeGuruProfilerReadOnlyAccess
AWS managed
0
None
2019-12-03 02:30 PST
2019-12-03 02:30 PST
Provides read only access to Amazon CodeGuru Profiler.
AmazonCodeGuruReviewerFullAccess
AWS managed
0
None
2019-12-03 00:33 PST
2019-12-03 00:33 PST
Grants full access to Amazon CodeGuru Reviewer and scoped access to required dependencies.
AmazonCodeGuruReviewerReadOnlyAccess
AWS managed
0
None
2019-12-03 00:48 PST
2019-12-03 00:48 PST
Provides read only access to Amazon CodeGuru Reviewer.
AmazonCodeGuruReviewerServiceRolePolicy
AWS managed
0
None
2019-12-02 21:31 PST
2019-12-02 21:31 PST
A service-linked role required for Amazon CodeGuru Reviewer to access resources on your behalf.
AmazonCognitoDeveloperAuthenticatedIdentities
AWS managed
0
None
2015-03-24 10:22 PST
2015-03-24 10:22 PST
Provides access to Amazon Cognito APIs to support developer authenticated identities from your authentication backend.
AmazonCognitoIdpEmailServiceRolePolicy
AWS managed
0
None
2019-03-21 14:32 PST
2019-03-21 14:32 PST
Allows Amazon Cognito User Pools service to use your SES identities for email sending
AmazonCognitoPowerUser
AWS managed
0
None
2015-03-24 10:14 PST
2019-03-29 15:06 PST
Provides administrative access to existing Amazon Cognito resources. You will need AWS account admin privileges to create new Cognito resources.
AmazonCognitoReadOnly
AWS managed
0
None
2015-03-24 10:06 PST
2019-08-01 12:21 PST
Provides read only access to Amazon Cognito resources.
AmazonConnectFullAccess
AWS managed
0
None
2018-10-17 13:59 PST
2018-10-17 15:28 PST
Provides full access to Amazon Connect via the AWS console, and grants permissions to: create and delete AWS Directory Service directories, create S3 buckets, create CloudWatch log groups, create Kinesis streams and firehoses, create and delete service-linked roles, use KMS keys, and get Lex bots
AmazonConnectReadOnlyAccess
AWS managed
0
None
2018-10-17 14:00 PST
2019-11-06 14:10 PST
Grants permission to view the Amazon Connect instances in your AWS account.
AmazonConnectServiceLinkedRolePolicy
AWS managed
0
None
2018-09-06 17:21 PST
2018-09-25 14:29 PST
Allows Amazon Connect to create and manage AWS resources on your behalf.
AmazonDMSCloudWatchLogsRole
AWS managed
0
None
2016-01-07 15:44 PST
2016-01-07 15:44 PST
Provides access to upload DMS replication logs to cloudwatch logs in customer account.
AmazonDMSRedshiftS3Role
AWS managed
0
None
2016-04-20 10:05 PST
2019-07-08 11:19 PST
Provides access to manage S3 settings for Redshift endpoints for DMS.
AmazonDMSVPCManagementRole
AWS managed
0
None
2015-11-18 08:33 PST
2016-05-23 09:29 PST
Provides access to manage VPC settings for AWS managed customer configurations
AmazonDocDBConsoleFullAccess
AWS managed
0
None
2019-01-09 12:37 PST
2019-10-21 11:57 PST
Provides full access to manage Amazon DocumentDB with MongoDB compatibility using the AWS Management Console. Note this policy also grants full access to publish on all SNS topics within the account, permissions to create and edit Amazon EC2 instances and VPC configurations, permissions to view and list keys on Amazon KMS, and full access to Amazon RDS and Amazon Neptune.
AmazonDocDBFullAccess
AWS managed
0
None
2019-01-09 12:21 PST
2019-01-09 12:21 PST
Provides full access to Amazon DocumentDB with MongoDB compatibility. Note this policy also grants full access to publish on all SNS topics within the account and full access to Amazon RDS and Amazon Neptune.
AmazonDocDBReadOnlyAccess
AWS managed
0
None
2019-01-09 12:30 PST
2019-01-09 12:30 PST
Provides read-only access to Amazon DocumentDB with MongoDB compatibility. Note that this policy also grants access to Amazon RDS and Amazon Neptune resources.
AmazonDRSVPCManagement
AWS managed
0
None
2015-09-01 17:09 PST
2015-09-01 17:09 PST
Provides access to manage VPC settings for Amazon managed customer configurations
AmazonDynamoDBFullAccess
AWS managed
0
None
2015-02-06 10:40 PST
2019-11-25 10:58 PST
Provides full access to Amazon DynamoDB via the AWS Management Console.
AmazonDynamoDBFullAccesswithDataPipeline
AWS managed
0
None
2015-02-06 10:40 PST
2015-11-11 18:17 PST
Provides full access to Amazon DynamoDB including Export/Import using AWS Data Pipeline via the AWS Management Console.
AmazonDynamoDBReadOnlyAccess
AWS managed
0
None
2015-02-06 10:40 PST
2019-11-25 11:08 PST
Provides read only access to Amazon DynamoDB via the AWS Management Console.
AmazonEC2ContainerRegistryFullAccess
AWS managed
0
None
2015-12-21 09:06 PST
2017-11-10 09:54 PST
Provides administrative access to Amazon ECR resources
AmazonEC2ContainerRegistryPowerUser
AWS managed
0
None
2015-12-21 09:05 PST
2019-12-10 12:48 PST
Provides full access to Amazon EC2 Container Registry repositories, but does not allow repository deletion or policy changes.
AmazonEC2ContainerRegistryReadOnly
AWS managed
0
None
2015-12-21 09:04 PST
2019-12-10 12:56 PST
Provides read-only access to Amazon EC2 Container Registry repositories.
AmazonEC2ContainerServiceAutoscaleRole
AWS managed
0
None
2016-05-12 16:25 PST
2018-02-05 11:15 PST
Policy to enable Task Autoscaling for Amazon EC2 Container Service
AmazonEC2ContainerServiceEventsRole
AWS managed
1
Permissions policy (1)
2017-05-30 09:51 PST
2018-05-22 12:13 PST
Policy to enable CloudWatch Events for EC2 Container Service
AmazonEC2ContainerServiceforEC2Role
AWS managed
1
Permissions policy (1)
2015-03-19 11:45 PST
2019-06-13 12:11 PST
Default policy for the Amazon EC2 Role for Amazon EC2 Container Service.
AmazonEC2ContainerServiceFullAccess
AWS managed
0
None
2015-04-24 09:54 PST
2017-06-07 17:18 PST
Provides administrative access to Amazon ECS resources.
AmazonEC2ContainerServiceRole
AWS managed
1
Permissions policy (1)
2015-04-09 09:14 PST
2016-08-11 06:08 PST
Default policy for Amazon ECS service role.
AmazonEC2FullAccess
AWS managed
0
None
2015-02-06 10:40 PST
2018-11-26 18:16 PST
Provides full access to Amazon EC2 via the AWS Management Console.
AmazonEC2ReadOnlyAccess
AWS managed
0
None
2015-02-06 10:40 PST
2015-02-06 10:40 PST
Provides read only access to Amazon EC2 via the AWS Management Console.
AmazonEC2RoleforAWSCodeDeploy
AWS managed
0
None
2015-05-19 11:10 PST
2017-03-20 10:14 PST
Provides EC2 access to S3 bucket to download revision. This role is needed by the CodeDeploy agent on EC2 instances.
AmazonEC2RoleforDataPipelineRole
AWS managed
0
None
2015-02-06 10:41 PST
2016-02-22 09:24 PST
Default policy for the Amazon EC2 Role for Data Pipeline service role.
AmazonEC2RoleforSSM
AWS managed
0
None
2015-05-29 10:48 PST
2019-01-24 11:20 PST
This policy will soon be deprecated. Please use AmazonSSMManagedInstanceCore policy to enable AWS Systems Manager service core functionality on EC2 instances. For more information see https://docs.aws.amazon.com/systems-manager/latest/userguide/setup-instance-profile.html
AmazonEC2RolePolicyForLaunchWizard
AWS managed
0
None
2019-11-13 00:05 PST
2019-11-24 13:48 PST
Managed policy for the Amazon LaunchWizard service role for EC2
AmazonEC2SpotFleetAutoscaleRole
AWS managed
0
None
2016-08-19 11:27 PST
2019-02-18 11:17 PST
Policy to enable Autoscaling for Amazon EC2 Spot Fleet
AmazonEC2SpotFleetRole
AWS managed
1
Permissions policy (1)
2015-05-18 16:28 PST
2017-11-07 11:14 PST
AmazonEC2SpotFleetTaggingRole
AWS managed
1
Permissions policy (1)
2017-06-29 11:19 PST
2017-11-17 14:51 PST
Allows EC2 Spot Fleet to request, terminate and tag Spot Instances on your behalf.
AmazonECS_FullAccess
AWS managed
0
None
2017-11-07 13:36 PST
2019-06-20 10:53 PST
Provides administrative access to Amazon ECS resources and enables ECS features through access to other AWS service resources, including VPCs, Auto Scaling groups, and CloudFormation stacks.
AmazonECSServiceRolePolicy
AWS managed
1
Permissions policy (1)
2017-10-13 18:18 PST
2019-11-21 11:49 PST
Policy to enable Amazon ECS to manage your cluster.
AmazonECSTaskExecutionRolePolicy
AWS managed
1
Permissions policy (1)
2017-11-16 10:48 PST
2017-11-16 10:48 PST
Provides access to other AWS service resources that are required to run Amazon ECS tasks
AmazonEKS_CNI_Policy
AWS managed
0
None
2018-05-27 14:07 PST
2019-06-27 11:10 PST
This policy provides the Amazon VPC CNI Plugin (amazon-vpc-cni-k8s) the permissions it requires to modify the IP address configuration on your EKS worker nodes. This permission set allows the CNI to list, describe, and modify Elastic Network Interfaces on your behalf. More information on the AWS VPC CNI Plugin is available here: https://github.com/aws/amazon-vpc-cni-k8s
AmazonEKSClusterPolicy
AWS managed
0
None
2018-05-27 14:06 PST
2020-02-21 12:10 PST
This policy provides Kubernetes the permissions it requires to manage resources on your behalf. Kubernetes requires Ec2:CreateTags permissions to place identifying information on EC2 resources including but not limited to Instances, Security Groups, and Elastic Network Interfaces.
AmazonEKSFargatePodExecutionRolePolicy
AWS managed
0
None
2019-11-21 20:34 PST
2019-11-21 20:34 PST
Provides access to other AWS service resources that are required to run Amazon EKS pods on AWS Fargate
AmazonEKSForFargateServiceRolePolicy
AWS managed
0
None
2019-11-21 20:36 PST
2019-11-21 20:36 PST
This policy grants necessary permissions to Amazon EKS to run fargate tasks
AmazonEKSServicePolicy
AWS managed
0
None
2018-05-27 14:08 PST
2019-08-21 09:17 PST
This policy allows Amazon Elastic Container Service for Kubernetes to create and manage the necessary resources to operate EKS Clusters.
AmazonEKSServiceRolePolicy
AWS managed
0
None
2020-02-21 12:10 PST
2020-02-21 12:10 PST
A Service-Linked Role required for Amazon EKS to call AWS services on your behalf.
AmazonEKSWorkerNodePolicy
AWS managed
0
None
2018-05-27 14:09 PST
2018-05-27 14:09 PST
This policy allows Amazon EKS worker nodes to connect to Amazon EKS Clusters.
AmazonElastiCacheFullAccess
AWS managed
0
None
2015-02-06 10:40 PST
2017-12-07 09:48 PST
Provides full access to Amazon ElastiCache via the AWS Management Console.
AmazonElastiCacheReadOnlyAccess
AWS managed
0
None
2015-02-06 10:40 PST
2015-02-06 10:40 PST
Provides read only access to Amazon ElastiCache via the AWS Management Console.
AmazonElasticFileSystemClientFullAccess
AWS managed
0
None
2020-01-13 08:27 PST
2020-01-13 08:27 PST
Provides root client access to an Amazon EFS file system
AmazonElasticFileSystemClientReadOnlyAccess
AWS managed
0
None
2020-01-13 08:24 PST
2020-01-13 08:24 PST
Provides read only client access to an Amazon EFS file system
AmazonElasticFileSystemClientReadWriteAccess
AWS managed
0
None
2020-01-13 08:21 PST
2020-01-13 08:21 PST
Provides read and write client access to an Amazon EFS file system
AmazonElasticFileSystemFullAccess
AWS managed
0
None
2015-05-27 09:22 PST
2020-01-13 08:15 PST
Provides full access to Amazon EFS via the AWS Management Console.
AmazonElasticFileSystemReadOnlyAccess
AWS managed
0
None
2015-05-27 09:25 PST
2020-01-13 08:16 PST
Provides read only access to Amazon EFS via the AWS Management Console.
AmazonElasticFileSystemServiceRolePolicy
AWS managed
0
None
2019-11-05 08:52 PST
2019-11-05 08:52 PST
Allows Amazon Elastic File System to manage AWS resources on your behalf
AmazonElasticMapReduceEditorsRole
AWS managed
0
None
2018-11-16 13:55 PST
2018-11-16 13:55 PST
Default policy for the Amazon Elastic MapReduce Editors service role.
AmazonElasticMapReduceforAutoScalingRole
AWS managed
0
None
2016-11-17 17:09 PST
2016-11-17 17:09 PST
Amazon Elastic MapReduce for Auto Scaling. Role to allow Auto Scaling to add and remove instances from your EMR cluster.
AmazonElasticMapReduceforEC2Role
AWS managed
0
None
2015-02-06 10:41 PST
2017-08-11 16:57 PST
Default policy for the Amazon Elastic MapReduce for EC2 service role.
AmazonElasticMapReduceFullAccess
AWS managed
0
None
2015-02-06 10:40 PST
2019-10-11 08:19 PST
Provides full access to Amazon Elastic MapReduce and underlying services that it requires such as EC2 and S3
AmazonElasticMapReduceReadOnlyAccess
AWS managed
0
None
2015-02-06 10:40 PST
2017-05-22 16:00 PST
Provides read only access to Amazon Elastic MapReduce via the AWS Management Console.
AmazonElasticMapReduceRole
AWS managed
0
None
2015-02-06 10:41 PST
2017-12-11 16:47 PST
Default policy for the Amazon Elastic MapReduce service role.
AmazonElasticsearchServiceRolePolicy
AWS managed
0
None
2017-07-06 17:15 PST
2018-02-08 13:38 PST
Allow Amazon Elasticsearch Service to access other AWS services such as EC2 Networking APIs on your behalf.
AmazonElasticTranscoder_FullAccess
AWS managed
0
None
2018-04-27 11:59 PST
2019-06-10 15:51 PST
Grants users full access to Elastic Transcoder and the access to associated services that is required for full Elastic Transcoder functionality.
AmazonElasticTranscoder_JobsSubmitter
AWS managed
0
None
2018-06-07 14:12 PST
2019-06-10 15:49 PST
Grants users permission to change presets, submit jobs, and view Elastic Transcoder settings. This policy also grants some read-only access to some other services required to use the Elastic Transcode console, including S3, IAM, and SNS.
AmazonElasticTranscoder_ReadOnlyAccess
AWS managed
0
None
2018-06-07 14:09 PST
2019-06-10 15:48 PST
Grants users read-only access to Elastic Transcoder and list access to related services.
AmazonElasticTranscoderRole
AWS managed
0
None
2015-02-06 10:41 PST
2019-06-13 15:48 PST
Default policy for the Amazon Elastic Transcoder service role.
AmazonEMRCleanupPolicy
AWS managed
0
None
2017-09-26 16:54 PST
2017-09-26 16:54 PST
Allows the actions that EMR requires to terminate and delete AWS EC2 resources if the EMR Service role has lost that ability.
AmazonESCognitoAccess
AWS managed
0
None
2018-02-28 14:29 PST
2018-02-28 14:29 PST
Provides limited access to the Amazon Cognito configuration service.
AmazonESFullAccess
AWS managed
0
None
2015-10-01 12:14 PST
2015-10-01 12:14 PST
Provides full access to the Amazon ES configuration service.
AmazonESReadOnlyAccess
AWS managed
0
None
2015-10-01 12:18 PST
2018-10-02 20:32 PST
Provides read-only access to the Amazon ES configuration service.
AmazonEventBridgeFullAccess
AWS managed
0
None
2019-07-11 07:08 PST
2019-07-11 07:08 PST
Provides full access to Amazon EventBridge.
AmazonEventBridgeReadOnlyAccess
AWS managed
0
None
2019-07-11 06:59 PST
2019-07-11 06:59 PST
Provides read only access to Amazon EventBridge.
AmazonEventBridgeSchemasFullAccess
AWS managed
0
None
2019-11-28 15:12 PST
2019-11-28 15:12 PST
Provides full access to Amazon EventBridge Schemas.
AmazonEventBridgeSchemasReadOnlyAccess
AWS managed
0
None
2019-11-28 15:05 PST
2019-11-28 15:05 PST
Provides read only access to Amazon EventBridge Schemas.
AmazonEventBridgeSchemasServiceRolePolicy
AWS managed
0
None
2019-11-26 17:10 PST
2019-11-26 17:10 PST
AmazonForecastFullAccess
AWS managed
0
None
2019-01-17 17:52 PST
2019-01-17 17:52 PST
Gives access to all actions for Amazon Forecast
AmazonFraudDetectorFullAccessPolicy
AWS managed
0
None
2019-12-03 14:46 PST
2019-12-03 14:46 PST
Gives access to all actions for Amazon Fraud Detector
AmazonFreeRTOSFullAccess
AWS managed
0
None
2017-11-29 07:32 PST
2017-11-29 07:32 PST
Full Access Policy for Amazon FreeRTOS
AmazonFreeRTOSOTAUpdate
AWS managed
0
None
2018-08-27 15:43 PST
2019-10-07 13:11 PST
Allows user to access Amazon FreeRTOS OTA Update
AmazonFSxConsoleFullAccess
AWS managed
0
None
2018-11-28 08:36 PST
2020-01-21 08:42 PST
Provides full access to Amazon FSx and access to related AWS services via the AWS Management Console.
AmazonFSxConsoleReadOnlyAccess
AWS managed
0
None
2018-11-28 08:35 PST
2019-09-10 06:17 PST
Provides read only access to Amazon FSx and access to related AWS services via the AWS Management Console.
AmazonFSxFullAccess
AWS managed
0
None
2018-11-28 08:34 PST
2018-11-28 08:34 PST
Provides full access to Amazon FSx and access to related AWS services.
AmazonFSxReadOnlyAccess
AWS managed
0
None
2018-11-28 08:33 PST
2018-11-28 08:33 PST
Provides read only access to Amazon FSx.
AmazonFSxServiceRolePolicy
AWS managed
0
None
2018-11-28 02:38 PST
2019-06-18 06:25 PST
Allows Amazon FSx to manage AWS resources on your behalf
AmazonGlacierFullAccess
AWS managed
0
None
2015-02-06 10:40 PST
2015-02-06 10:40 PST
Provides full access to Amazon Glacier via the AWS Management Console.
AmazonGlacierReadOnlyAccess
AWS managed
0
None
2015-02-06 10:40 PST
2016-05-05 11:46 PST
Provides read only access to Amazon Glacier via the AWS Management Console.
AmazonGuardDutyFullAccess
AWS managed
0
None
2017-11-28 14:31 PST
2017-11-28 14:31 PST
Provides full access to use Amazon GuardDuty.
AmazonGuardDutyReadOnlyAccess
AWS managed
0
None
2017-11-28 14:29 PST
2018-04-25 14:07 PST
Provides read only access to Amazon GuardDuty resources
AmazonGuardDutyServiceRolePolicy
AWS managed
1
Permissions policy (1)
2017-11-28 12:12 PST
2017-11-28 12:12 PST
Enable access to AWS Resources used or managed by Amazon Guard Duty
AmazonInspectorFullAccess
AWS managed
0
None
2015-10-07 10:08 PST
2017-12-21 06:53 PST
Provides full access to Amazon Inspector.
AmazonInspectorReadOnlyAccess
AWS managed
0
None
2015-10-07 10:08 PST
2019-10-01 08:17 PST
Provides read only access to Amazon Inspector.
AmazonInspectorServiceRolePolicy
AWS managed
0
None
2017-11-21 07:48 PST
2018-05-10 11:36 PST
Grants Amazon Inspector access to AWS Services needed to perform security assessments
AmazonKendraFullAccess
AWS managed
0
None
2019-12-03 08:15 PST
2019-12-03 08:15 PST
Provides full access to Amazon Kendra via the AWS Management Console.
AmazonKendraReadOnlyAccess
AWS managed
0
None
2019-12-03 08:13 PST
2019-12-03 08:13 PST
Provides read only access to Amazon Kendra via the AWS Management Console.
AmazonKinesisAnalyticsFullAccess
AWS managed
0
None
2016-09-21 12:01 PST
2016-09-21 12:01 PST
Provides full access to Amazon Kinesis Analytics via the AWS Management Console.
AmazonKinesisAnalyticsReadOnly
AWS managed
0
None
2016-09-21 11:16 PST
2016-09-21 11:16 PST
Provides read-only access to Amazon Kinesis Analytics via the AWS Management Console.
AmazonKinesisFirehoseFullAccess
AWS managed
0
None
2015-10-07 11:45 PST
2015-10-07 11:45 PST
Provides full access to all Amazon Kinesis Firehose Delivery Streams.
AmazonKinesisFirehoseReadOnlyAccess
AWS managed
0
None
2015-10-07 11:43 PST
2015-10-07 11:43 PST
Provides read only access to all Amazon Kinesis Firehose Delivery Streams.
AmazonKinesisFullAccess
AWS managed
0
None
2015-02-06 10:40 PST
2015-02-06 10:40 PST
Provides full access to all streams via the AWS Management Console.
AmazonKinesisReadOnlyAccess
AWS managed
0
None
2015-02-06 10:40 PST
2015-02-06 10:40 PST
Provides read only access to all streams via the AWS Management Console.
AmazonKinesisVideoStreamsFullAccess
AWS managed
0
None
2017-12-01 15:27 PST
2017-12-01 15:27 PST
Provides full access to Amazon Kinesis Video Streams via the AWS Management Console.
AmazonKinesisVideoStreamsReadOnlyAccess
AWS managed
0
None
2017-12-01 15:14 PST
2017-12-01 15:14 PST
Provides read only access to AWS Kinesis Video Streams via the AWS Management Console.
AmazonLaunchWizardFullaccess
AWS managed
0
None
2019-11-13 09:08 PST
2019-11-24 13:55 PST
Provides full access to LaunchWizard via the AWS console, and grants permissions to create and delete EC2 instances / VPCs / Subnets / CloudWatch logs with a specific tag key, create and delete Managed Active Directory, read Service quota information, push SNS notifications, create and delete Systems Manager automations, invoke SSM run commands, create and delete CloudFormation stacks, IAM role related permissions with a specific role prefix. In future, the policy may be updated to allow for creating / deletion / describe / listing of additional resource types based on the application scenario(s) the service is going to support.
AmazonLexFullAccess
AWS managed
0
None
2017-04-11 16:20 PST
2017-11-15 15:55 PST
Provides full access to Amazon Lex via the AWS Management Console. Also provides access to create Lex Service Linked Roles and grant Lex permissions to invoke a limited set of Lambda functions.
AmazonLexReadOnly
AWS managed
0
None
2017-04-11 16:13 PST
2017-04-11 16:13 PST
Provides read-only access to Amazon Lex.
AmazonLexRunBotsOnly
AWS managed
0
None
2017-04-11 16:06 PST
2017-04-11 16:06 PST
Provides access to Amazon Lex conversational APIs.
AmazonMachineLearningBatchPredictionsAccess
AWS managed
0
None
2015-04-09 10:12 PST
2015-04-09 10:12 PST
Grants users permission to request Amazon Machine Learning batch predictions.
AmazonMachineLearningCreateOnlyAccess
AWS managed
0
None
2015-04-09 10:18 PST
2016-06-29 13:55 PST
Provides create access for non-prediction Amazon Machine Learning resources.
AmazonMachineLearningFullAccess
AWS managed
0
None
2015-04-09 10:25 PST
2015-04-09 10:25 PST
Provides full access to Amazon Machine Learning resources.
AmazonMachineLearningManageRealTimeEndpointOnlyAccess
AWS managed
0
None
2015-04-09 10:32 PST
2015-04-09 10:32 PST
Grants users permission to create and delete the real-time endpoint for Amazon Machine Learning models.
AmazonMachineLearningReadOnlyAccess
AWS managed
0
None
2015-04-09 10:40 PST
2015-04-09 10:40 PST
Provides read only access to Amazon Machine Learning resources.
AmazonMachineLearningRealTimePredictionOnlyAccess
AWS managed
0
None
2015-04-09 10:44 PST
2015-04-09 10:44 PST
Grants users permission to request Amazon Machine Learning real-time predictions.
AmazonMachineLearningRoleforRedshiftDataSourceV2
AWS managed
0
None
2019-06-10 17:01 PST
2019-06-10 17:01 PST
Allows Machine Learning to configure and use your Redshift Clusters and S3 Staging Locations for Redshift Data Source.
AmazonMacieFullAccess
AWS managed
0
None
2017-08-14 07:54 PST
2018-06-28 08:54 PST
Provides full access to Amazon Macie.
AmazonMacieHandshakeRole
AWS managed
0
None
2018-06-28 08:46 PST
2018-06-28 08:46 PST
Grants permission to create the service-linked role of Amazon Macie.
AmazonMacieServiceRole
AWS managed
0
None
2017-08-14 07:53 PST
2017-08-14 07:53 PST
Grants Macie read-only access to resource dependencies in your account in order to enable data analysis.
AmazonMacieServiceRolePolicy
AWS managed
0
None
2018-06-19 15:17 PST
2019-09-27 14:50 PST
Service linked role for Amazon Macie
AmazonMacieSetupRole
AWS managed
0
None
2017-08-14 07:53 PST
2019-09-27 11:41 PST
Provides Macie with access to your AWS account.
AmazonManagedBlockchainConsoleFullAccess
AWS managed
0
None
2019-04-29 14:23 PST
2019-04-29 14:23 PST
Provides full access to Amazon Managed Blockchain via the AWS Management Console
AmazonManagedBlockchainFullAccess
AWS managed
0
None
2019-04-29 14:39 PST
2019-04-29 14:39 PST
Provides full access to Amazon Managed Blockchain.
AmazonManagedBlockchainReadOnlyAccess
AWS managed
0
None
2019-04-30 11:17 PST
2019-04-30 11:17 PST
Provides read-only access to Amazon Managed Blockchain.
AmazonManagedBlockchainServiceRolePolicy
AWS managed
0
None
2020-01-17 11:51 PST
2020-01-17 11:51 PST
Enables access to AWS Services and Resources used or managed by Amazon Managed Blockchain
AmazonMCSFullAccess
AWS managed
0
None
2019-12-03 05:45 PST
2019-12-03 05:45 PST
Provide full access to Amazon Managed Apache Cassandra Service
AmazonMCSReadOnlyAccess
AWS managed
0
None
2019-12-03 05:46 PST
2019-12-03 05:46 PST
Provide read only access to Amazon Managed Apache Cassandra Service
AmazonMechanicalTurkFullAccess
AWS managed
0
None
2015-12-11 11:08 PST
2015-12-11 11:08 PST
Provides full access to all APIs in Amazon Mechanical Turk.
AmazonMechanicalTurkReadOnly
AWS managed
0
None
2015-12-11 11:08 PST
2019-09-25 14:06 PST
Provides access to read only APIs in Amazon Mechanical Turk.
AmazonMobileAnalyticsFinancialReportAccess
AWS managed
0
None
2015-02-06 10:40 PST
2015-02-06 10:40 PST
Provides read only access to all reports including financial data for all application resources.
AmazonMobileAnalyticsFullAccess
AWS managed
0
None
2015-02-06 10:40 PST
2015-02-06 10:40 PST
Provides full access to all application resources.
AmazonMobileAnalyticsNon-financialReportAccess
AWS managed
0
None
2015-02-06 10:40 PST
2015-02-06 10:40 PST
Provides read only access to non financial reports for all application resources.
AmazonMobileAnalyticsWriteOnlyAccess
AWS managed
0
None
2015-02-06 10:40 PST
2015-02-06 10:40 PST
Provides write only access to put event data for all application resources. (Recommended for SDK integration)
AmazonMQApiFullAccess
AWS managed
0
None
2018-12-18 12:31 PST
2018-12-18 12:31 PST
Provides full access to AmazonMQ via our API/SDK.
AmazonMQApiReadOnlyAccess
AWS managed
0
None
2018-12-18 12:31 PST
2018-12-18 12:31 PST
Provides read only access to AmazonMQ via our API/SDK.
AmazonMQFullAccess
AWS managed
0
None
2017-11-28 07:28 PST
2018-12-18 12:33 PST
Provides full access to AmazonMQ via the AWS Management Console.
AmazonMQReadOnlyAccess
AWS managed
0
None
2017-11-28 07:30 PST
2017-11-28 11:02 PST
Provides read only access to AmazonMQ via the AWS Management Console.
AmazonMSKFullAccess
AWS managed
0
None
2019-01-14 14:07 PST
2020-02-27 17:16 PST
Provide full access to Amazon MSK and other required permissions for its dependencies.
AmazonMSKReadOnlyAccess
AWS managed
0
None
2019-01-14 14:28 PST
2019-01-14 14:28 PST
Provide readonly access to Amazon MSK
AmazonPersonalizeFullAccess
AWS managed
0
None
2018-12-04 14:24 PST
2019-05-30 16:46 PST
Provides full access to Amazon Personalize via the AWS Management Console and SDK. Also provides select access to related services (e.g., S3, CloudWatch).
AmazonPollyFullAccess
AWS managed
0
None
2016-11-30 10:59 PST
2016-11-30 10:59 PST
Grants full access to Amazon Polly service and resources.
AmazonPollyReadOnlyAccess
AWS managed
0
None
2016-11-30 10:59 PST
2018-07-17 09:41 PST
Grants read-only access to Amazon Polly resources.
AmazonQLDBConsoleFullAccess
AWS managed
0
None
2019-09-05 11:24 PST
2019-09-05 11:24 PST
Provides full access to Amazon QLDB via the AWS Management Console.
AmazonQLDBFullAccess
AWS managed
0
None
2019-09-05 11:23 PST
2019-09-05 11:23 PST
Provides full access to Amazon QLDB via the service API.
AmazonQLDBReadOnly
AWS managed
0
None
2019-09-05 11:19 PST
2019-09-05 11:19 PST
Provides read only access to Amazon QLDB.
AmazonRDSBetaServiceRolePolicy
AWS managed
0
None
2018-05-02 12:41 PST
2018-07-05 11:29 PST
Allows Amazon RDS to manage AWS resources on your behalf.
AmazonRDSDataFullAccess
AWS managed
0
None
2018-11-20 13:29 PST
2019-11-20 13:58 PST
Allows full access to use the RDS data APIs, secret store APIs for RDS database credentials, and DB console query management APIs to execute SQL statements on Aurora Serverless clusters in the AWS account.
AmazonRDSDirectoryServiceAccess
AWS managed
0
None
2016-02-25 18:02 PST
2019-05-15 09:51 PST
Allow RDS to access Directory Service Managed AD on behalf of the customer for domain-joined SQL Server DB instances.
AmazonRDSEnhancedMonitoringRole
AWS managed
1
Permissions policy (1)
2015-11-11 11:58 PST
2015-11-11 11:58 PST
Provides access to Cloudwatch for RDS Enhanced Monitoring
AmazonRDSFullAccess
AWS managed
0
None
2015-02-06 10:40 PST
2018-04-09 10:42 PST
Provides full access to Amazon RDS via the AWS Management Console.
AmazonRDSPreviewServiceRolePolicy
AWS managed
0
None
2018-05-31 11:02 PST
2018-05-31 11:02 PST
Amazon RDS Preview Service Role Policy
AmazonRDSReadOnlyAccess
AWS managed
0
None
2015-02-06 10:40 PST
2017-08-28 14:36 PST
Provides read only access to Amazon RDS via the AWS Management Console.
AmazonRDSServiceRolePolicy
AWS managed
1
Permissions policy (1)
2018-01-08 10:17 PST
2019-04-16 13:12 PST
Allows Amazon RDS to manage AWS resources on your behalf.
AmazonRedshiftFullAccess
AWS managed
0
None
2015-02-06 10:40 PST
2019-08-05 17:05 PST
Provides full access to Amazon Redshift via the AWS Management Console.
AmazonRedshiftQueryEditor
AWS managed
0
None
2018-10-04 15:50 PST
2018-10-04 15:50 PST
Provides full access to the Amazon Redshift Query Editor and to saved queries via the AWS Management Console.
AmazonRedshiftReadOnlyAccess
AWS managed
0
None
2015-02-06 10:40 PST
2015-02-06 10:40 PST
Provides read only access to Amazon Redshift via the AWS Management Console.
AmazonRedshiftServiceLinkedRolePolicy
AWS managed
0
None
2017-09-18 12:19 PST
2017-09-25 14:20 PST
Allows Amazon Redshift to call AWS services on your behalf
AmazonRekognitionCustomLabelsFullAccess
AWS managed
0
None
2020-01-08 11:18 PST
2020-01-08 11:18 PST
This policy specifies rekognition and s3 permissions required by Amazon Rekognition Custom Labels feature.
AmazonRekognitionFullAccess
AWS managed
0
None
2016-11-30 06:40 PST
2016-11-30 06:40 PST
Access to all Amazon Rekognition APIs
AmazonRekognitionReadOnlyAccess
AWS managed
0
None
2016-11-30 06:58 PST
2020-02-20 13:26 PST
Access to all Read rekognition APIs
AmazonRekognitionServiceRole
AWS managed
0
None
2017-11-29 08:52 PST
2017-11-29 08:52 PST
Allows Rekognition to call AWS services on your behalf.
AmazonRoute53AutoNamingFullAccess
AWS managed
0
None
2018-01-18 10:40 PST
2018-01-18 10:40 PST
Provides full access to all Route 53 Auto Naming actions.
AmazonRoute53AutoNamingReadOnlyAccess
AWS managed
0
None
2018-01-17 19:02 PST
2018-01-17 19:02 PST
Provides read-only access to all Route 53 Auto Naming actions.
AmazonRoute53AutoNamingRegistrantAccess
AWS managed
0
None
2018-03-12 15:33 PST
2018-03-12 15:33 PST
Provides registrant level access to Route 53 Auto Naming actions.
AmazonRoute53DomainsFullAccess
AWS managed
0
None
2015-02-06 10:40 PST
2015-02-06 10:40 PST
Provides full access to all Route53 Domains actions and Create Hosted Zone to allow Hosted Zone creation as part of domain registrations.
AmazonRoute53DomainsReadOnlyAccess
AWS managed
0
None
2015-02-06 10:40 PST
2015-02-06 10:40 PST
Provides access to Route53 Domains list and actions.
AmazonRoute53FullAccess
AWS managed
0
None
2015-02-06 10:40 PST
2018-12-20 13:42 PST
Provides full access to all Amazon Route 53 via the AWS Management Console.
AmazonRoute53ReadOnlyAccess
AWS managed
0
None
2015-02-06 10:40 PST
2016-11-15 13:15 PST
Provides read only access to all Amazon Route 53 via the AWS Management Console.
AmazonRoute53ResolverFullAccess
AWS managed
0
None
2019-05-30 11:10 PST
2019-05-30 11:10 PST
Full access policy for Route 53 Resolver
AmazonRoute53ResolverReadOnlyAccess
AWS managed
0
None
2019-05-30 11:11 PST
2019-09-27 09:37 PST
Read only policy for Route 53 Resolver
AmazonS3FullAccess
AWS managed
0
None
2015-02-06 10:40 PST
2015-02-06 10:40 PST
Provides full access to all buckets via the AWS Management Console.
AmazonS3ReadOnlyAccess
AWS managed
0
None
2015-02-06 10:40 PST
2015-02-06 10:40 PST
Provides read only access to all buckets via the AWS Management Console.
AmazonSageMakerFullAccess
AWS managed
0
None
2017-11-29 05:07 PST
2020-01-13 12:47 PST
Provides full access to Amazon SageMaker via the AWS Management Console and SDK. Also provides select access to related services (e.g., S3, ECR, CloudWatch Logs).
AmazonSageMakerMechanicalTurkAccess
AWS managed
0
None
2019-12-03 08:19 PST
2019-12-03 08:19 PST
Provides access to create Amazon Augmented AI FlowDefinition resources against any Workteam.
AmazonSageMakerNotebooksServiceRolePolicy
AWS managed
0
None
2019-10-18 13:27 PST
2019-11-26 10:58 PST
Managed policy for Service Linked Role for Amazon SageMaker Notebooks
AmazonSageMakerReadOnly
AWS managed
0
None
2017-11-29 05:07 PST
2019-12-03 08:40 PST
Provides read only access to Amazon SageMaker via the AWS Management Console and SDK.
AmazonSESFullAccess
AWS managed
0
None
2015-02-06 10:41 PST
2015-02-06 10:41 PST
Provides full access to Amazon SES via the AWS Management Console.
AmazonSESReadOnlyAccess
AWS managed
0
None
2015-02-06 10:41 PST
2015-02-06 10:41 PST
Provides read only access to Amazon SES via the AWS Management Console.
AmazonSNSFullAccess
AWS managed
0
None
2015-02-06 10:41 PST
2015-02-06 10:41 PST
Provides full access to Amazon SNS via the AWS Management Console.
AmazonSNSReadOnlyAccess
AWS managed
0
None
2015-02-06 10:41 PST
2015-02-06 10:41 PST
Provides read only access to Amazon SNS via the AWS Management Console.
AmazonSNSRole
AWS managed
0
None
2015-02-06 10:41 PST
2015-02-06 10:41 PST
Default policy for Amazon SNS service role.
AmazonSQSFullAccess
AWS managed
0
None
2015-02-06 10:41 PST
2015-02-06 10:41 PST
Provides full access to Amazon SQS via the AWS Management Console.
AmazonSQSReadOnlyAccess
AWS managed
0
None
2015-02-06 10:41 PST
2018-08-20 16:35 PST
Provides read only access to Amazon SQS via the AWS Management Console.
AmazonSSMAutomationApproverAccess
AWS managed
0
None
2017-08-07 16:07 PST
2017-08-07 16:07 PST
Provides access to view automation executions and send approval decisions to automation waiting for approval
AmazonSSMAutomationRole
AWS managed
0
None
2016-12-05 14:09 PST
2017-07-24 16:29 PST
Provides permissions for EC2 Automation service to execute activities defined within Automation documents
AmazonSSMDirectoryServiceAccess
AWS managed
0
None
2019-03-15 10:44 PST
2019-03-15 10:44 PST
This policy allows SSM Agent to access Directory Service on behalf of the customer for domain-join the managed instance.
AmazonSSMFullAccess
AWS managed
0
None
2015-05-29 10:39 PST
2019-11-20 12:08 PST
Provides full access to Amazon SSM.
AmazonSSMMaintenanceWindowRole
AWS managed
0
None
2016-12-01 07:57 PST
2019-07-26 17:16 PST
Service Role to be used for EC2 Maintenance Window
AmazonSSMManagedInstanceCore
AWS managed
0
None
2019-03-15 10:22 PST
2019-05-23 09:54 PST
The policy for Amazon EC2 Role to enable AWS Systems Manager service core functionality.
AmazonSSMReadOnlyAccess
AWS managed
0
None
2015-05-29 10:44 PST
2015-05-29 10:44 PST
Provides read only access to Amazon SSM.
AmazonSSMServiceRolePolicy
AWS managed
0
None
2017-11-13 11:20 PST
2020-01-22 13:46 PST
Provides access to AWS Resources managed or used by Amazon SSM
AmazonSumerianFullAccess
AWS managed
0
None
2018-04-24 13:14 PST
2018-04-24 13:14 PST
Provides full access to Amazon Sumerian.
AmazonTextractFullAccess
AWS managed
0
None
2018-11-28 11:07 PST
2018-11-28 11:07 PST
Access to all Amazon Textract APIs
AmazonTextractServiceRole
AWS managed
0
None
2018-11-28 11:12 PST
2018-11-28 11:12 PST
Allows Textract to call AWS services on your behalf.
AmazonTranscribeFullAccess
AWS managed
0
None
2018-04-04 09:06 PST
2018-04-04 09:06 PST
Provides full access to Amazon Transcribe operations
AmazonTranscribeReadOnlyAccess
AWS managed
0
None
2018-04-04 09:05 PST
2018-04-04 09:05 PST
Provides access to read only operation for Amazon Transcribe
AmazonVPCCrossAccountNetworkInterfaceOperations
AWS managed
0
None
2017-07-18 13:47 PST
2019-01-07 11:16 PST
Provides access to create network interfaces and attach them to cross-account resources
AmazonVPCFullAccess
AWS managed
0
None
2015-02-06 10:41 PST
2018-03-15 11:30 PST
Provides full access to Amazon VPC via the AWS Management Console.
AmazonVPCReadOnlyAccess
AWS managed
0
None
2015-02-06 10:41 PST
2018-03-07 10:34 PST
Provides read only access to Amazon VPC via the AWS Management Console.
AmazonWorkDocsReadOnlyAccess
AWS managed
0
None
2020-01-08 15:49 PST
2020-01-08 15:49 PST
Provides read only access to Amazon WorkDocs via the AWS Management Console
AmazonWorkLinkFullAccess
AWS managed
0
None
2019-01-23 10:52 PST
2019-09-23 11:37 PST
Grants full access to Amazon WorkLink resources
AmazonWorkLinkReadOnly
AWS managed
0
None
2019-01-23 11:07 PST
2019-09-23 11:37 PST
Grants read only access to Amazon WorkLink resources
AmazonWorkLinkServiceRolePolicy
AWS managed
0
None
2019-03-18 11:00 PST
2020-02-07 12:48 PST
Enables access to AWS Services and Resources used or managed by Amazon WorkLink
AmazonWorkMailEventsServiceRolePolicy
AWS managed
0
None
2019-04-16 09:52 PST
2019-04-16 09:52 PST
Enables access to AWS Services and Resources used or managed by Amazon WorkMail Events
AmazonWorkMailFullAccess
AWS managed
0
None
2015-02-06 10:40 PST
2019-12-09 03:52 PST
Provides full access to WorkMail, Directory Service, SES, EC2 and read access to KMS metadata.
AmazonWorkMailReadOnlyAccess
AWS managed
0
None
2015-02-06 10:40 PST
2019-07-25 01:24 PST
Provides read only access to WorkMail and SES.
AmazonWorkSpacesAdmin
AWS managed
0
None
2015-09-22 15:21 PST
2016-08-18 16:08 PST
Provides access to Amazon WorkSpaces administrative actions via AWS SDK and CLI.
AmazonWorkSpacesApplicationManagerAdminAccess
AWS managed
0
None
2015-04-09 07:03 PST
2015-04-09 07:03 PST
Provides administrator access for packaging an application in Amazon WorkSpaces Application Manager.
AmazonWorkSpacesSelfServiceAccess
AWS managed
0
None
2019-06-27 12:22 PST
2019-06-27 12:22 PST
Provides access to Amazon WorkSpaces backend service to perform Workspace Self Service actions
AmazonWorkSpacesServiceAccess
AWS managed
0
None
2019-06-27 12:19 PST
2019-06-27 12:19 PST
Provides customer account access to AWS WorkSpaces service for launching a Workspace.
AmazonZocaloFullAccess
AWS managed
0
None
2015-02-06 10:41 PST
2015-02-06 10:41 PST
Provides full access to Amazon Zocalo.
AmazonZocaloReadOnlyAccess
AWS managed
0
None
2015-02-06 10:41 PST
2015-02-06 10:41 PST
Provides read only access to Amazon Zocalo
APIGatewayServiceRolePolicy
AWS managed
0
None
2017-10-20 10:23 PST
2020-02-25 12:24 PST
Allows API Gateway to manage associated AWS Resources on behalf of the customer.
ApplicationAutoScalingForAmazonAppStreamAccess
AWS managed
0
None
2017-02-06 13:39 PST
2017-02-06 13:39 PST
Policy to enable Application Autoscaling for Amazon AppStream
ApplicationDiscoveryServiceContinuousExportServiceRolePolicy
AWS managed
0
None
2018-08-09 13:22 PST
2018-08-13 15:31 PST
Enables access to AWS Services and Resources used or managed by Application Discovery Service Continuous Export feature
AutoScalingConsoleFullAccess
AWS managed
0
None
2017-01-12 11:43 PST
2018-02-06 15:15 PST
Provides full access to Auto Scaling via the AWS Management Console.
AutoScalingConsoleReadOnlyAccess
AWS managed
0
None
2017-01-12 11:48 PST
2017-01-12 11:48 PST
Provides read-only access to Auto Scaling via the AWS Management Console.
AutoScalingFullAccess
AWS managed
0
None
2017-01-12 11:31 PST
2018-02-06 13:59 PST
Provides full access to Auto Scaling.
AutoScalingNotificationAccessRole
AWS managed
0
None
2015-02-06 10:41 PST
2015-02-06 10:41 PST
Default policy for the AutoScaling Notification Access service role.
AutoScalingReadOnlyAccess
AWS managed
0
None
2017-01-12 11:39 PST
2017-01-12 11:39 PST
Provides read-only access to Auto Scaling.
AutoScalingServiceRolePolicy
AWS managed
0
None
2018-01-08 15:10 PST
2018-10-31 11:19 PST
Enables access to AWS Services and Resources used or managed by Auto Scaling
AWSAccountActivityAccess
AWS managed
0
None
2015-02-06 10:41 PST
2015-02-06 10:41 PST
Allows users to access the Account Activity page.
AWSAccountUsageReportAccess
AWS managed
0
None
2015-02-06 10:41 PST
2015-02-06 10:41 PST
Allows users to access the Account Usage Report page.
AWSAgentlessDiscoveryService
AWS managed
0
None
2016-08-01 18:35 PST
2020-02-24 15:08 PST
Provides access for the Discovery Agentless Connector to register with AWS Application Discovery Service.
AWSApplicationAutoscalingAppStreamFleetPolicy
AWS managed
0
None
2017-10-20 12:04 PST
2017-10-20 12:04 PST
Policy granting permissions to Application Auto Scaling to access AppStream and CloudWatch.
AWSApplicationAutoscalingComprehendEndpointPolicy
AWS managed
0
None
2019-11-14 10:39 PST
2019-11-14 10:39 PST
Policy granting permissions to Application Auto Scaling to access Comprehend and CloudWatch.
AWSApplicationAutoScalingCustomResourcePolicy
AWS managed
0
None
2018-06-04 16:22 PST
2018-06-04 16:22 PST
Policy granting permissions to Application Auto Scaling to access APIGateway and CloudWatch for custom resource scaling
AWSApplicationAutoscalingDynamoDBTablePolicy
AWS managed
0
None
2017-10-20 14:34 PST
2017-10-20 14:34 PST
Policy granting permissions to Application Auto Scaling to access DynamoDB and CloudWatch.
AWSApplicationAutoscalingEC2SpotFleetRequestPolicy
AWS managed
0
None
2017-10-25 11:23 PST
2017-10-25 11:23 PST
Policy granting permissions to Application Auto Scaling to access EC2 Spot Fleet and CloudWatch.
AWSApplicationAutoscalingECSServicePolicy
AWS managed
0
None
2017-10-25 16:53 PST
2017-10-25 16:53 PST
Policy granting permissions to Application Auto Scaling to access EC2 Container Service and CloudWatch.
AWSApplicationAutoscalingEMRInstanceGroupPolicy
AWS managed
0
None
2017-10-25 17:57 PST
2017-10-25 17:57 PST
Policy granting permissions to Application Auto Scaling to access Elastic Map Reduce and CloudWatch.
AWSApplicationAutoscalingLambdaConcurrencyPolicy
AWS managed
0
None
2019-10-21 13:04 PST
2019-10-21 13:04 PST
Policy granting permissions to Application Auto Scaling to access Lambda and CloudWatch.
AWSApplicationAutoscalingRDSClusterPolicy
AWS managed
0
None
2017-10-17 10:46 PST
2018-08-07 12:14 PST
Policy granting permissions to Application Auto Scaling to access RDS and CloudWatch.
AWSApplicationAutoscalingSageMakerEndpointPolicy
AWS managed
0
None
2018-02-06 11:58 PST
2018-02-06 11:58 PST
Policy granting permissions to Application Auto Scaling to access SageMaker and CloudWatch.
AWSApplicationDiscoveryAgentAccess
AWS managed
0
None
2016-05-11 14:38 PST
2020-02-24 14:26 PST
Provides access for the Discovery Agent to register with AWS Application Discovery Service.
AWSApplicationDiscoveryServiceFullAccess
AWS managed
0
None
2016-05-11 14:30 PST
2019-06-19 14:21 PST
Provides full access to view and tag Configuration Items maintained by the AWS Application Discovery Service
AWSAppMeshEnvoyAccess
AWS managed
0
None
2019-07-03 14:29 PST
2019-07-03 14:29 PST
App Mesh Envoy policy for accessing Virtual Node configuration.
AWSAppMeshFullAccess
AWS managed
0
None
2019-04-16 10:50 PST
2019-10-03 15:28 PST
Provides full access to the AWS App Mesh APIs and Management Console.
AWSAppMeshPreviewEnvoyAccess
AWS managed
0
None
2019-08-05 16:32 PST
2019-08-05 16:32 PST
App Mesh Preview Envoy policy for accessing Virtual Node configuration.
AWSAppMeshPreviewServiceRolePolicy
AWS managed
0
None
2019-06-19 12:07 PST
2019-08-21 14:06 PST
Enables access to AWS Services and Resources used or managed by AWS App Mesh
AWSAppMeshReadOnly
AWS managed
0
None
2019-04-16 10:51 PST
2019-10-03 15:25 PST
Provides read-only access to the AWS App Mesh APIs and Management Console.
AWSAppMeshServiceRolePolicy
AWS managed
0
None
2019-06-03 11:30 PST
2019-09-10 15:44 PST
Enables access to AWS Services and Resources used or managed by AWS AppMesh
AWSAppSyncAdministrator
AWS managed
0
None
2018-03-20 14:20 PST
2019-11-04 11:23 PST
Provides administrative access to the AppSync service, though not enough to access via the console.
AWSAppSyncInvokeFullAccess
AWS managed
0
None
2018-03-20 14:21 PST
2018-03-20 14:21 PST
Provides full invoking access to the AppSync service - both through the console and independently
AWSAppSyncPushToCloudWatchLogs
AWS managed
0
None
2018-04-09 12:38 PST
2018-04-09 12:38 PST
Allows AppSync to push logs to user's CloudWatch account.
AWSAppSyncSchemaAuthor
AWS managed
0
None
2018-03-20 14:21 PST
2018-03-20 14:21 PST
Provides access to create, update, and query the schema.
AWSAppSyncServiceRolePolicy
AWS managed
0
None
2020-01-21 11:56 PST
2020-01-21 11:56 PST
Enables access to AWS services and resources used or managed by AppSync
AWSArtifactAccountSync
AWS managed
0
None
2018-04-10 16:04 PST
2018-04-10 16:04 PST
Allows AWS Artifact read-only access to operations in AWS Organizations.
AWSAutoScalingPlansEC2AutoScalingPolicy
AWS managed
0
None
2018-08-23 15:46 PST
2018-08-23 15:46 PST
Policy granting permissions to AWS Auto Scaling to periodically forecast capacity and generate scheduled scaling actions for Auto Scaling groups in a scaling plan
AWSB9InternalServicePolicy
AWS managed
0
None
2018-12-13 10:48 PST
2018-12-13 10:48 PST
RoboMaker service policy for internal SLR
AWSBackupFullAccess
AWS managed
0
None
2019-11-18 14:21 PST
2020-01-13 10:40 PST
This policy is for backup administrators, granting full access to AWS Backup operations, including creating or editing backup plans, assigning AWS resources to backup plans, deleting backups, and restoring backups.
AWSBackupOperatorAccess
AWS managed
0
None
2019-11-18 14:23 PST
2020-01-13 08:15 PST
This policy grants users permissions to assign AWS resources to backup plans, create on-demand backups, and restore backups. This policy does not allow the user to create or edit backup plans or to delete scheduled backups after they are created.
AWSBackupServiceRolePolicyForBackup
AWS managed
0
None
2019-01-10 13:01 PST
2020-01-13 08:02 PST
Provides AWS Backup permission to create backups on your behalf across AWS services
AWSBackupServiceRolePolicyForRestores
AWS managed
0
None
2019-01-11 16:23 PST
2020-01-13 08:04 PST
Provides AWS Backup permission to perform restores on your behalf across AWS services. This policy includes permissions to create and delete AWS resources, such as EBS volumes, RDS instances, and EFS file systems, which are part of the restore process.
AWSBatchFullAccess
AWS managed
0
None
2016-12-06 11:35 PST
2018-11-05 13:09 PST
Provides full access for AWS Batch resources.
AWSBatchServiceEventTargetRole
AWS managed
0
None
2018-02-28 14:31 PST
2018-02-28 14:31 PST
Policy to enable CloudWatch Event Target for AWS Batch Job Submission
AWSBatchServiceRole
AWS managed
0
None
2016-12-06 11:36 PST
2019-10-08 12:31 PST
Policy for AWS Batch service role which allows access to related services including EC2, Autoscaling, EC2 Container service and Cloudwatch Logs.
AWSCertificateManagerFullAccess
AWS managed
0
None
2016-01-21 09:02 PST
2016-01-21 09:02 PST
Provides full access to AWS Certificate Manager (ACM)
AWSCertificateManagerPrivateCAAuditor
AWS managed
0
None
2018-10-23 09:51 PST
2019-03-14 10:17 PST
Provides auditor access to AWS Certificate Manager Private Certificate Authority
AWSCertificateManagerPrivateCAFullAccess
AWS managed
0
None
2018-10-23 09:54 PST
2018-10-23 09:54 PST
Provides full access to AWS Certificate Manager Private Certificate Authority
AWSCertificateManagerPrivateCAPrivilegedUser
AWS managed
0
None
2019-06-20 10:43 PST
2019-06-20 10:43 PST
Provides privileged certificate user access to AWS Certificate Manager Private Certificate Authority
AWSCertificateManagerPrivateCAReadOnly
AWS managed
0
None
2018-10-23 09:57 PST
2019-03-14 10:17 PST
Provides read only access to AWS Certificate Manager Private Certificate Authority
AWSCertificateManagerPrivateCAUser
AWS managed
0
None
2018-10-23 09:53 PST
2019-06-20 10:42 PST
Provides certificate user access to AWS Certificate Manager Private Certificate Authority
AWSCertificateManagerReadOnly
AWS managed
0
None
2016-01-21 09:07 PST
2016-04-21 08:08 PST
Provides read only access to AWS Certificate Manager (ACM).
AWSChatbotServiceLinkedRolePolicy
AWS managed
0
None
2019-11-18 08:39 PST
2019-11-18 08:39 PST
The Service Linked Role used by AWS Chatbot.
AWSCloud9Administrator
AWS managed
0
None
2017-11-30 08:17 PST
2017-11-30 08:17 PST
Provides administrator access to AWS Cloud9.
AWSCloud9EnvironmentMember
AWS managed
0
None
2017-11-30 08:18 PST
2017-11-30 08:18 PST
Provides the ability to be invited into AWS Cloud9 shared development environments.
AWSCloud9ServiceRolePolicy
AWS managed
0
None
2017-11-30 05:44 PST
2020-01-08 04:35 PST
Service Linked Role Policy for AWS Cloud9
AWSCloud9User
AWS managed
0
None
2017-11-30 08:16 PST
2018-07-02 01:46 PST
Provides permission to create AWS Cloud9 development environments and to manage owned environments.
AWSCloudFormationFullAccess
AWS managed
0
None
2019-07-26 14:50 PST
2019-07-26 14:50 PST
Provides full access to AWS CloudFormation.
AWSCloudFormationReadOnlyAccess
AWS managed
0
None
2015-02-06 10:39 PST
2019-11-13 09:40 PST
Provides access to AWS CloudFormation via the AWS Management Console.
AWSCloudFrontLogger
AWS managed
0
None
2018-06-12 13:15 PST
2019-11-22 11:33 PST
Grants CloudFront Logger write permissions to CloudWatch Logs.
AWSCloudHSMFullAccess
AWS managed
0
None
2015-02-06 10:39 PST
2015-02-06 10:39 PST
Provides full access to all CloudHSM resources.
AWSCloudHSMReadOnlyAccess
AWS managed
0
None
2015-02-06 10:39 PST
2015-02-06 10:39 PST
Provides read only access to all CloudHSM resources.
AWSCloudHSMRole
AWS managed
0
None
2015-02-06 10:41 PST
2015-02-06 10:41 PST
Default policy for the AWS CloudHSM service role.
AWSCloudMapDiscoverInstanceAccess
AWS managed
0
None
2018-11-28 16:02 PST
2018-11-28 16:02 PST
Provides access to AWS Cloud Map discovery API.
AWSCloudMapFullAccess
AWS managed
0
None
2018-11-28 15:57 PST
2018-11-28 15:57 PST
Provides full access to all AWS Cloud Map actions.
AWSCloudMapReadOnlyAccess
AWS managed
0
None
2018-11-28 15:45 PST
2018-11-28 15:45 PST
Provides read-only access to all AWS Cloud Map actions.
AWSCloudMapRegisterInstanceAccess
AWS managed
0
None
2018-11-28 16:04 PST
2018-11-28 16:04 PST
Provides registrant level access to AWS Cloud Map actions.
AWSCloudTrailFullAccess
AWS managed
0
None
2015-02-06 10:39 PST
2019-09-12 16:08 PST
Provides full access to AWS CloudTrail.
AWSCloudTrailReadOnlyAccess
AWS managed
0
None
2015-02-06 10:39 PST
2019-11-20 13:06 PST
Provides read only access to AWS CloudTrail.
AWSCodeBuildAdminAccess
AWS managed
0
None
2016-12-01 11:04 PST
2020-02-06 12:26 PST
Provides full access to AWS CodeBuild via the AWS Management Console. Also attach AmazonS3ReadOnlyAccess to provide access to download build artifacts, and attach IAMFullAccess to create and manage the service role for CodeBuild.
AWSCodeBuildDeveloperAccess
AWS managed
0
None
2016-12-01 11:02 PST
2020-01-02 12:18 PST
Provides access to AWS CodeBuild via the AWS Management Console, but does not allow CodeBuild project administration. Also attach AmazonS3ReadOnlyAccess to provide access to download build artifacts.
AWSCodeBuildReadOnlyAccess
AWS managed
0
None
2016-12-01 11:03 PST
2020-01-02 12:06 PST
Provides read only access to AWS CodeBuild via the AWS Management Console. Also attach AmazonS3ReadOnlyAccess to provide access to download build artifacts.
AWSCodeCommitFullAccess
AWS managed
0
None
2015-07-09 10:02 PST
2019-12-02 23:56 PST
Provides full access to AWS CodeCommit via the AWS Management Console.
AWSCodeCommitPowerUser
AWS managed
0
None
2015-07-09 10:06 PST
2019-12-03 00:15 PST
Provides full access to AWS CodeCommit repositories, but does not allow repository deletion.
AWSCodeCommitReadOnly
AWS managed
0
None
2015-07-09 10:05 PST
2019-12-03 00:08 PST
Provides read only access to AWS CodeCommit via the AWS Management Console.
AWSCodeDeployDeployerAccess
AWS managed
0
None
2015-05-19 11:18 PST
2019-11-05 14:59 PST
Provides access to register and deploy a revision.
AWSCodeDeployFullAccess
AWS managed
0
None
2015-05-19 11:13 PST
2019-11-05 14:57 PST
Provides full access to CodeDeploy resources.
AWSCodeDeployReadOnlyAccess
AWS managed
0
None
2015-05-19 11:21 PST
2019-11-05 15:01 PST
Provides read only access to CodeDeploy resources.
AWSCodeDeployRole
AWS managed
0
None
2015-05-04 11:05 PST
2019-09-23 14:47 PST
Provides CodeDeploy service access to expand tags and interact with Auto Scaling on your behalf.
AWSCodeDeployRoleForECS
AWS managed
0
None
2018-11-27 12:40 PST
2019-09-23 15:37 PST
Provides CodeDeploy service wide access to perform an ECS blue/green deployment on your behalf. Grants full access to support services, such as full access to read all S3 objects, invoke all Lambda functions, publish to all SNS topics within the account and update all ECS services.
AWSCodeDeployRoleForECSLimited
AWS managed
0
None
2018-11-27 12:42 PST
2019-09-23 15:10 PST
Provides CodeDeploy service limited access to perform an ECS blue/green deployment on your behalf.
AWSCodeDeployRoleForLambda
AWS managed
0
None
2017-11-28 06:05 PST
2019-12-03 11:53 PST
Provides CodeDeploy service access to perform a Lambda deployment on your behalf.
AWSCodePipelineApproverAccess
AWS managed
0
None
2016-07-28 11:59 PST
2017-08-02 10:24 PST
Provides access to view and approve manual changes for all pipelines
AWSCodePipelineCustomActionAccess
AWS managed
0
None
2015-07-09 10:02 PST
2015-07-09 10:02 PST
Provides access for custom actions to poll for jobs details (including temporary credentials) and report status updates to AWS CodePipeline.
AWSCodePipelineFullAccess
AWS managed
0
None
2015-07-09 09:58 PST
2019-11-05 15:04 PST
Provides full access to AWS CodePipeline via the AWS Management Console.
AWSCodePipelineReadOnlyAccess
AWS managed
0
None
2015-07-09 09:43 PST
2019-11-05 15:01 PST
Provides read only access to AWS CodePipeline via the AWS Management Console.
AWSCodeStarFullAccess
AWS managed
0
None
2017-04-19 09:23 PST
2018-01-10 13:54 PST
Provides full access to AWS CodeStar via the AWS Management Console.
AWSCodeStarNotificationsServiceRolePolicy
AWS managed
0
None
2019-11-05 08:10 PST
2020-02-12 09:52 PST
Allows AWS CodeStar Notifications to access Amazon CloudWatch Events on your behalf
AWSCodeStarServiceRole
AWS managed
1
Permissions policy (1)
2017-04-19 08:20 PST
2019-04-24 12:25 PST
DO NOT USE - AWS CodeStar Service Role Policy which grants administrative privileges in order for CodeStar to manage IAM and other service resources on behalf of the customer.
AWSConfigMultiAccountSetupPolicy
AWS managed
0
None
2019-06-17 11:03 PST
2020-03-04 08:51 PST
Allows Config to call AWS services and deploy config resources across organization
AWSConfigRemediationServiceRolePolicy
AWS managed
0
None
2019-06-18 14:21 PST
2019-06-18 14:21 PST
Allows AWS Config to remediate noncompliant resources on your behalf.
AWSConfigRole
AWS managed
0
None
2015-04-02 10:36 PST
2019-11-18 14:42 PST
Default policy for AWS Config service role.
AWSConfigRoleForOrganizations
AWS managed
0
None
2018-03-19 15:53 PST
2018-03-19 15:53 PST
Allows AWS Config to call read-only AWS Organizations APIs
AWSConfigRulesExecutionRole
AWS managed
0
None
2016-03-25 10:59 PST
2019-05-13 14:33 PST
Allows an AWS Lambda function to access the AWS Config API and the configuration snapshots that AWS Config delivers periodically to Amazon S3. This access is required by functions that evaluate configuration changes for custom Config rules.
AWSConfigServiceRolePolicy
AWS managed
1
Permissions policy (1)
2018-05-30 16:31 PST
2019-11-18 14:33 PST
Allows Config to call AWS services and collect resource configurations on your behalf.
AWSConfigUserAccess
AWS managed
0
None
2015-02-18 11:38 PST
2019-03-18 13:27 PST
Provides access to use AWS Config, including searching by tags on resources, and reading all tags. This does not provide permission to configure AWS Config, which requires administrative privileges.
AWSConnector
AWS managed
0
None
2015-02-11 09:14 PST
2015-09-28 12:50 PST
Enables broad read/write access to ALL EC2 objects, read/write access to S3 buckets starting with 'import-to-ec2-', and the ability to list all S3 buckets, for the AWS Connector to import VMs on your behalf.
AWSControlTowerServiceRolePolicy
AWS managed
0
None
2019-05-03 11:19 PST
2019-06-13 09:36 PST
Provides access to AWS Resources managed or used by AWS Control Tower
AWSDataExchangeFullAccess
AWS managed
0
None
2019-11-13 11:27 PST
2019-11-13 11:27 PST
Grants full access to AWS Data Exchange and AWS Marketplace actions using the AWS Management Console and SDK. It also provides select access to related services needed to take full advantage of AWS Data Exchange.
AWSDataExchangeProviderFullAccess
AWS managed
0
None
2019-11-13 11:27 PST
2019-11-25 08:25 PST
Grants data provider access to AWS Data Exchange and AWS Marketplace actions using the AWS Management Console and SDK. It also provides select access to related services needed to take full advantage of AWS Data Exchange.
AWSDataExchangeReadOnly
AWS managed
0
None
2019-11-13 11:27 PST
2019-11-13 11:27 PST
Grants read-only access to AWS Data Exchange and AWS Marketplace actions using the AWS Management Console and SDK.
AWSDataExchangeSubscriberFullAccess
AWS managed
0
None
2019-11-13 11:27 PST
2019-11-13 11:27 PST
Grants data subscriber access to AWS Data Exchange and AWS Marketplace actions using the AWS Management Console and SDK. It also provides select access to related services needed to take full advantage of AWS Data Exchange.
AWSDataLifecycleManagerServiceRole
AWS managed
0
None
2018-07-06 12:34 PST
2019-12-19 11:42 PST
Provides appropriate permissions to AWS Data Lifecycle Manager to take actions on AWS resources
AWSDataPipeline_FullAccess
AWS managed
0
None
2017-01-19 15:14 PST
2017-08-17 11:48 PST
Provides full access to Data Pipeline, list access for S3, DynamoDB, Redshift, RDS, SNS, and IAM roles, and passRole access for default Roles.
AWSDataPipeline_PowerUser
AWS managed
0
None
2017-01-19 15:16 PST
2017-08-17 11:49 PST
Provides full access to Data Pipeline, list access for S3, DynamoDB, Redshift, RDS, SNS, and IAM roles, and passRole access for default Roles.
AWSDataPipelineRole
AWS managed
0
None
2015-02-06 10:41 PST
2017-12-22 15:43 PST
Default policy for the AWS Data Pipeline service role.
AWSDataSyncFullAccess
AWS managed
0
None
2019-01-18 11:40 PST
2020-01-24 09:59 PST
Provides full access to AWS DataSync and minimal access to its dependencies
AWSDataSyncReadOnlyAccess
AWS managed
0
None
2019-01-18 11:18 PST
2020-01-24 09:59 PST
Provides read-only access to AWS DataSync
AWSDeepLensLambdaFunctionAccessPolicy
AWS managed
0
None
2017-11-29 07:47 PST
2019-06-11 16:11 PST
This policy specifies permissions required by DeepLens Administrative lambda functions that run on a DeepLens device
AWSDeepLensServiceRolePolicy
AWS managed
0
None
2017-11-29 07:46 PST
2019-09-25 12:25 PST
Grants AWS DeepLens access to AWS Services, resources and roles needed by DeepLens and its dependencies including IoT, S3, GreenGrass and AWS Lambda.
AWSDeepRacerCloudFormationAccessPolicy
AWS managed
0
None
2019-02-28 13:59 PST
2019-06-14 10:02 PST
Allows CloudFormation to create and manage AWS stacks and resources on your behalf.
AWSDeepRacerRoboMakerAccessPolicy
AWS managed
0
None
2019-02-28 13:59 PST
2019-02-28 13:59 PST
Allows RoboMaker to create required resources and call AWS services on your behalf.
AWSDeepRacerServiceRolePolicy
AWS managed
0
None
2019-02-28 13:58 PST
2019-06-12 13:55 PST
Allows DeepRacer to create required resources and call AWS services on your behalf.
AWSDenyAll
AWS managed
0
None
2019-05-01 15:36 PST
2019-05-01 15:36 PST
Deny all access.
AWSDeviceFarmFullAccess
AWS managed
0
None
2015-07-13 09:37 PST
2015-07-13 09:37 PST
Provides full access to all AWS Device Farm operations.
AWSDirectConnectFullAccess
AWS managed
0
None
2015-02-06 10:40 PST
2019-04-30 08:29 PST
Provides full access to AWS Direct Connect via the AWS Management Console.
AWSDirectConnectReadOnlyAccess
AWS managed
0
None
2015-02-06 10:40 PST
2019-04-30 08:23 PST
Provides read only access to AWS Direct Connect via the AWS Management Console.
AWSDirectoryServiceFullAccess
AWS managed
0
None
2015-02-06 10:41 PST
2019-02-05 12:29 PST
Provides full access to AWS Directory Service.
AWSDirectoryServiceReadOnlyAccess
AWS managed
0
None
2015-02-06 10:41 PST
2018-09-25 14:54 PST
Provides read only access to AWS Directory Service.
AWSDiscoveryContinuousExportFirehosePolicy
AWS managed
0
None
2018-08-09 11:29 PST
2018-08-09 11:29 PST
Provides write access to AWS resources required for AWS Discovery Continuous Export
AWSEC2FleetServiceRolePolicy
AWS managed
0
None
2018-03-20 17:08 PST
2018-04-19 14:37 PST
Allows EC2 Fleet to launch and manage instances.
AWSEC2SpotFleetServiceRolePolicy
AWS managed
1
Permissions policy (1)
2017-10-23 12:13 PST
2018-03-28 12:04 PST
Allows EC2 Spot Fleet to launch and manage spot fleet instances
AWSEC2SpotServiceRolePolicy
AWS managed
1
Permissions policy (1)
2017-09-18 11:51 PST
2018-12-11 16:13 PST
Allows EC2 Spot to launch and manage spot instances
AWSElasticBeanstalkCustomPlatformforEC2Role
AWS managed
0
None
2017-02-21 14:50 PST
2017-02-21 14:50 PST
Provide the instance in your custom platform builder environment permission to launch EC2 instance, create EBS snapshot and AMI, stream logs to Amazon CloudWatch Logs, and store artifacts in Amazon S3.
AWSElasticBeanstalkEnhancedHealth
AWS managed
0
None
2016-02-08 15:17 PST
2018-04-09 15:12 PST
AWS Elastic Beanstalk Service policy for Health Monitoring system
AWSElasticBeanstalkFullAccess
AWS managed
0
None
2015-02-06 10:40 PST
2019-07-10 12:27 PST
Provides full access to AWS Elastic Beanstalk and underlying services that it requires such as S3 and EC2.
AWSElasticBeanstalkMaintenance
AWS managed
0
None
2019-01-11 15:22 PST
2019-06-04 10:48 PST
AWS Elastic Beanstalk Service Role policy that grants limited permissions to update your resources on your behalf for maintenance purposes.
AWSElasticBeanstalkManagedUpdatesServiceRolePolicy
AWS managed
0
None
2019-11-21 14:35 PST
2019-11-21 14:35 PST
AWS Elastic Beanstalk Service Role policy that grants limited permissions to managed updates.
AWSElasticBeanstalkMulticontainerDocker
AWS managed
0
None
2016-02-08 15:15 PST
2016-06-06 16:45 PST
Provide the instances in your multicontainer Docker environment access to use the Amazon EC2 Container Service to manage container deployment tasks.
AWSElasticBeanstalkReadOnlyAccess
AWS managed
0
None
2015-02-06 10:40 PST
2015-02-06 10:40 PST
Provides read only access to AWS Elastic Beanstalk via the AWS Management Console.
AWSElasticBeanstalkService
AWS managed
0
None
2016-04-11 13:27 PST
2019-06-14 16:18 PST
AWS Elastic Beanstalk Service role policy which grants permissions to create & manage resources (i.e.: AutoScaling, EC2, S3, CloudFormation, ELB, etc.) on your behalf.
AWSElasticBeanstalkServiceRolePolicy
AWS managed
0
None
2017-09-13 16:46 PST
2019-06-06 14:59 PST
AWS Elastic Beanstalk Service Linked Role policy which grants permissions to create & manage resources (i.e.: AutoScaling, EC2, S3, CloudFormation, ELB, etc.) on your behalf.
AWSElasticBeanstalkWebTier
AWS managed
0
None
2016-02-08 15:08 PST
2019-02-28 16:04 PST
Provide the instances in your web server environment access to upload log files to Amazon S3.
AWSElasticBeanstalkWorkerTier
AWS managed
0
None
2016-02-08 15:12 PST
2019-02-28 16:07 PST
Provide the instances in your worker environment access to upload log files to Amazon S3, to use Amazon SQS to monitor your application's job queue, to use Amazon DynamoDB to perform leader election, and to Amazon CloudWatch to publish metrics for health monitoring.
AWSElasticLoadBalancingClassicServiceRolePolicy
AWS managed
0
None
2017-09-19 15:36 PST
2019-10-07 16:04 PST
Service Linked Role Policy for AWS Elastic Load Balancing Control Plane - Classic
AWSElasticLoadBalancingServiceRolePolicy
AWS managed
1
Permissions policy (1)
2017-09-19 15:19 PST
2019-10-07 15:55 PST
Service Linked Role Policy for AWS Elastic Load Balancing Control Plane
AWSElementalMediaConvertFullAccess
AWS managed
0
None
2018-06-25 12:25 PST
2019-06-10 15:52 PST
Provides full access to AWS Elemental MediaConvert via the AWS Management Console and SDK.
AWSElementalMediaConvertReadOnly
AWS managed
0
None
2018-06-25 12:25 PST
2019-06-10 15:52 PST
Provides read only access to AWS Elemental MediaConvert via the AWS Management Console and SDK.
AWSElementalMediaPackageFullAccess
AWS managed
0
None
2017-12-29 15:39 PST
2017-12-29 15:39 PST
Provides full access to AWS Elemental MediaPackage resources
AWSElementalMediaPackageReadOnly
AWS managed
0
None
2017-12-29 16:04 PST
2017-12-29 16:04 PST
Provides read only access to AWS Elemental MediaPackage resources
AWSElementalMediaStoreFullAccess
AWS managed
0
None
2018-03-05 15:15 PST
2018-03-05 15:15 PST
Provides full read and write access to all MediaStore APIs
AWSElementalMediaStoreReadOnly
AWS managed
0
None
2018-03-08 11:48 PST
2018-03-08 11:48 PST
Provides read-only permissions for MediaStore APIs
AWSEnhancedClassicNetworkingMangementPolicy
AWS managed
0
None
2017-09-20 10:29 PST
2017-09-20 10:29 PST
Policy to enable enhanced classic networking management feature.
AWSFMAdminFullAccess
AWS managed
0
None
2018-05-09 11:06 PST
2018-05-09 11:06 PST
Full access for AWS FM Administrator
AWSFMAdminReadOnlyAccess
AWS managed
0
None
2018-05-09 13:07 PST
2018-05-09 13:07 PST
Read only access for AWS FM Administrator that allows monitoring AWS FM operations
AWSFMMemberReadOnlyAccess
AWS managed
0
None
2018-05-09 14:05 PST
2018-05-09 14:05 PST
Provides read only access to AWS WAF actions for AWS Firewall Manager member accounts
AWSForWordPressPluginPolicy
AWS managed
0
None
2019-10-29 17:27 PST
2020-01-20 15:20 PST
Managed policy for AWS For Wordpress Plugin
AWSGlobalAcceleratorSLRPolicy
AWS managed
0
None
2019-04-05 12:39 PST
2019-10-14 14:05 PST
Policy granting permissions to AWS Global Accelerator to manage EC2 Elastic Network Interfaces and Security Groups.
AWSGlueConsoleFullAccess
AWS managed
0
None
2017-08-14 06:37 PST
2019-02-11 11:49 PST
Provides full access to AWS Glue via the AWS Management Console
AWSGlueConsoleSageMakerNotebookFullAccess
AWS managed
0
None
2018-10-05 10:52 PST
2019-09-26 10:14 PST
Provides full access to AWS Glue via the AWS Management Console and access to sagemaker notebook instances.
AWSGlueServiceNotebookRole
AWS managed
0
None
2017-08-14 06:37 PST
2019-10-07 11:05 PST
Policy for AWS Glue service role which allows customer to manage notebook server
AWSGlueServiceRole
AWS managed
1
Permissions policy (1)
2017-08-14 06:37 PST
2018-06-25 11:23 PST
Policy for AWS Glue service role which allows access to related services including EC2, S3, and Cloudwatch Logs
AWSGreengrassFullAccess
AWS managed
0
None
2017-05-02 17:47 PST
2017-05-02 17:47 PST
This policy gives full access to the AWS Greengrass configuration, management and deployment actions
AWSGreengrassReadOnlyAccess
AWS managed
0
None
2018-10-30 09:01 PST
2018-10-30 09:01 PST
This policy gives read only access to the AWS Greengrass configuration, management and deployment actions
AWSGreengrassResourceAccessRolePolicy
AWS managed
0
None
2017-02-14 13:17 PST
2018-11-13 16:35 PST
Policy for AWS Greengrass service role which allows access to related services including AWS Lambda and AWS IoT thing shadows.
AWSHealthFullAccess
AWS managed
0
None
2016-12-06 04:30 PST
2019-12-22 06:25 PST
Allows full access to the AWS Health Apis and Notifications and the Personal Health Dashboard
AWSImageBuilderFullAccess
AWS managed
0
None
2019-12-20 10:25 PST
2019-12-20 10:25 PST
Provides full access to all AWS Image Builder actions and resource scoped access to related AWS services.
AWSImageBuilderReadOnlyAccess
AWS managed
0
None
2019-12-19 14:29 PST
2019-12-19 14:29 PST
Provides read only access to all AWS Image Builder actions.
AWSImportExportFullAccess
AWS managed
0
None
2015-02-06 10:40 PST
2015-02-06 10:40 PST
Provides read and write access to the jobs created under the AWS account.
AWSImportExportReadOnlyAccess
AWS managed
0
None
2015-02-06 10:40 PST
2015-02-06 10:40 PST
Provides read only access to the jobs created under the AWS account.
AWSIoT1ClickFullAccess
AWS managed
0
None
2018-05-11 15:10 PST
2018-05-11 15:10 PST
Provides full access to AWS IoT 1-Click.
AWSIoT1ClickReadOnlyAccess
AWS managed
0
None
2018-05-11 14:49 PST
2018-05-11 14:49 PST
Provides read only access to AWS IoT 1-Click.
AWSIoTAnalyticsFullAccess
AWS managed
0
None
2018-06-18 16:02 PST
2018-06-18 16:02 PST
Provides full access to IoT Analytics.
AWSIoTAnalyticsReadOnlyAccess
AWS managed
0
None
2018-06-18 14:37 PST
2018-06-18 14:37 PST
Provides read only access to IoT Analytics.
AWSIoTConfigAccess
AWS managed
0
None
2015-10-27 14:52 PST
2019-09-27 13:48 PST
This policy gives full access to the AWS IoT configuration actions
AWSIoTConfigReadOnlyAccess
AWS managed
0
None
2015-10-27 14:52 PST
2019-09-27 13:52 PST
This policy gives read only access to the AWS IoT configuration actions
AWSIoTDataAccess
AWS managed
0
None
2015-10-27 14:51 PST
2017-11-16 10:24 PST
This policy gives full access to the AWS IoT messaging actions
AWSIoTDeviceDefenderAddThingsToThingGroupMitigationAction
AWS managed
0
None
2019-08-07 10:55 PST
2019-08-07 10:55 PST
Provides write access to IoT thing groups and read access to IoT Certificates for execution of ADD_THINGS_TO_THING_GROUP mitigation action
AWSIoTDeviceDefenderAudit
AWS managed
0
None
2018-07-18 14:17 PST
2019-11-25 15:52 PST
Provides read access for IoT and related resources
AWSIoTDeviceDefenderEnableIoTLoggingMitigationAction
AWS managed
0
None
2019-08-07 10:04 PST
2019-08-07 10:04 PST
Provides access for enabling IoT logging for execution of ENABLE_IOT_LOGGING mitigation action
AWSIoTDeviceDefenderPublishFindingsToSNSMitigationAction
AWS managed
0
None
2019-08-07 10:04 PST
2019-08-07 10:04 PST
Provides messages publish access to SNS topic for execution of PUBLISH_FINDING_TO_SNS mitigation action
AWSIoTDeviceDefenderReplaceDefaultPolicyMitigationAction
AWS managed
0
None
2019-08-07 10:04 PST
2019-08-07 10:04 PST
Provides write access to IoT policies for execution of REPLACE_DEFAULT_POLICY_VERSION mitigation action
AWSIoTDeviceDefenderUpdateCACertMitigationAction
AWS managed
0
None
2019-08-07 10:05 PST
2019-08-07 10:05 PST
Provides write access to IoT CA certificates for execution of UPDATE_CA_CERTIFICATE mitigation action
AWSIoTDeviceDefenderUpdateDeviceCertMitigationAction
AWS managed
0
None
2019-08-07 10:06 PST
2019-08-07 10:06 PST
Provides write access to IoT certificates for execution of UPDATE_DEVICE_CERTIFICATE mitigation action
AWSIoTDeviceTesterForFreeRTOSFullAccess
AWS managed
0
None
2020-02-12 12:33 PST
2020-02-18 10:05 PST
Allows AWS IoT Device Tester to run the FreeRTOS qualification suite by allowing access to services including IoT, S3, and IAM
AWSIoTDeviceTesterForGreengrassFullAccess
AWS managed
0
None
2020-02-20 13:21 PST
2020-02-26 10:26 PST
Allows AWS IoT Device Tester to run the AWS Greengrass qualification suite by allowing access to related services including Lambda, IoT, API Gateway, IAM
AWSIoTEventsFullAccess
AWS managed
0
None
2019-01-10 14:51 PST
2019-01-10 14:51 PST
Provides full access to IoT Events.
AWSIoTEventsReadOnlyAccess
AWS managed
0
None
2019-01-10 14:50 PST
2019-09-23 10:22 PST
Provides read only access to IoT Events.
AWSIoTFullAccess
AWS managed
0
None
2015-10-08 08:19 PST
2015-10-08 08:19 PST
This policy gives full access to the AWS IoT configuration and messaging actions
AWSIoTLogging
AWS managed
0
None
2015-10-08 08:17 PST
2015-10-08 08:17 PST
Allows creation of Amazon CloudWatch Log groups and streaming logs to the groups
AWSIoTOTAUpdate
AWS managed
0
None
2017-12-20 12:36 PST
2017-12-20 12:36 PST
Allows access to create AWS IoT Job and describe the AWS code signer job
AWSIoTRuleActions
AWS managed
0
None
2015-10-08 08:14 PST
2018-01-16 11:28 PST
Allows access to all AWS services supported in AWS IoT Rule Actions
AWSIoTSiteWiseConsoleFullAccess
AWS managed
0
None
2019-05-31 14:37 PST
2019-05-31 14:37 PST
Provides full access to manage AWS IoT SiteWise using the AWS Management Console. Note this policy also grants access to create and list data stores used with AWS IoT SiteWise (e.g. AWS IoT Analytics), access to list and view AWS IoT Greengrass resources, list and modify AWS Secrets Manager secrets, retrieve AWS IoT thing shadows, list resources with specific tags, and create and use a service-linked role for AWS IoT SiteWise.
AWSIoTSiteWiseFullAccess
AWS managed
0
None
2018-12-04 12:53 PST
2018-12-04 12:53 PST
Provides full access to IoT SiteWise.
AWSIoTSiteWiseMonitorServiceRolePolicy
AWS managed
0
None
2019-11-13 16:59 PST
2019-12-13 14:19 PST
This role grants AWS IoT SiteWise monitor permissions to access your AWS IoT SiteWise assets & asset properties, and create AWS IoT Sitewise projects, dashboards & access policies through AWS IoT SiteWise portals.
AWSIoTSiteWiseReadOnlyAccess
AWS managed
0
None
2018-12-04 12:55 PST
2018-12-04 12:55 PST
Provides read only access to IoT SiteWise.
AWSIoTThingsRegistration
AWS managed
0
None
2017-12-01 12:21 PST
2020-02-27 15:27 PST
This policy allows users to register things at bulk using AWS IoT StartThingRegistrationTask API
AWSIQContractServiceRolePolicy
AWS managed
0
None
2019-08-22 12:28 PST
2019-08-22 12:28 PST
Used by AWS IQ to execute payment requests on behalf of a customer
AWSIQFullAccess
AWS managed
0
None
2019-04-04 16:13 PST
2019-09-25 13:22 PST
Provides full access to AWS IQ
AWSIQPermissionServiceRolePolicy
AWS managed
0
None
2019-08-22 12:36 PST
2019-08-22 12:36 PST
Allows AWS IQ to manage the role assumed by AWS IQ experts.
AWSKeyManagementServiceCustomKeyStoresServiceRolePolicy
AWS managed
0
None
2018-11-14 12:10 PST
2018-11-14 12:10 PST
Enables access to AWS services and resources required for AWS KMS custom key stores
AWSKeyManagementServicePowerUser
AWS managed
0
None
2015-02-06 10:40 PST
2017-03-06 16:55 PST
Provides access to AWS Key Management Service (KMS).
AWSLakeFormationDataAdmin
AWS managed
0
None
2019-08-08 10:33 PST
2019-12-16 14:41 PST
Grants administrative access to AWS Lake Formation and related services, such as AWS Glue, to manage data lakes
AWSLambdaBasicExecutionRole
AWS managed
3
Permissions policy (3)
2015-04-09 08:03 PST
2015-04-09 08:03 PST
Provides write permissions to CloudWatch Logs.
AWSLambdaDynamoDBExecutionRole
AWS managed
0
None
2015-04-09 08:09 PST
2015-04-09 08:09 PST
Provides list and read access to DynamoDB streams and write permissions to CloudWatch logs.
AWSLambdaENIManagementAccess
AWS managed
0
None
2016-12-05 16:37 PST
2016-12-05 16:37 PST
Provides minimum permissions for a Lambda function to manage ENIs (create, describe, delete) used by a VPC-enabled Lambda Function.
AWSLambdaExecute
AWS managed
1
Permissions policy (1)
2015-02-06 10:40 PST
2015-02-06 10:40 PST
Provides Put, Get access to S3 and full access to CloudWatch Logs.
AWSLambdaFullAccess
AWS managed
0
None
2015-02-06 10:40 PST
2017-11-27 15:22 PST
Provides full access to Lambda, S3, DynamoDB, CloudWatch Metrics and Logs.
AWSLambdaInvocation-DynamoDB
AWS managed
0
None
2015-02-06 10:40 PST
2015-02-06 10:40 PST
Provides read access to DynamoDB Streams.
AWSLambdaKinesisExecutionRole
AWS managed
0
None
2015-04-09 08:14 PST
2018-11-19 12:09 PST
Provides list and read access to Kinesis streams and write permissions to CloudWatch logs.
AWSLambdaReadOnlyAccess
AWS managed
0
None
2015-02-06 10:40 PST
2018-09-06 11:04 PST
Provides read only access to Lambda, S3, DynamoDB, CloudWatch Metrics and Logs.
AWSLambdaReplicator
AWS managed
0
None
2017-05-23 10:53 PST
2017-12-07 16:17 PST
Grants Lambda Replicator necessary permissions to replicate functions across regions
AWSLambdaRole
AWS managed
0
None
2015-02-06 10:41 PST
2015-02-06 10:41 PST
Default policy for AWS Lambda service role.
AWSLambdaSQSQueueExecutionRole
AWS managed
0
None
2018-06-14 14:50 PST
2018-06-14 14:50 PST
Provides receive message, delete message, and read attribute access to SQS queues, and write permissions to CloudWatch logs.
AWSLambdaVPCAccessExecutionRole
AWS managed
1
Permissions policy (1)
2016-02-11 15:15 PST
2016-02-11 15:15 PST
Provides minimum permissions for a Lambda function to execute while accessing a resource within a VPC - create, describe, delete network interfaces and write permissions to CloudWatch Logs.
AWSLicenseManagerMasterAccountRolePolicy
AWS managed
0
None
2018-11-26 11:03 PST
2019-08-29 15:56 PST
AWS License Manager service master account role policy
AWSLicenseManagerMemberAccountRolePolicy
AWS managed
0
None
2018-11-26 11:04 PST
2019-11-15 14:09 PST
AWS License Manager service member account role policy
AWSLicenseManagerServiceRolePolicy
AWS managed
0
None
2018-11-26 11:02 PST
2019-11-15 14:10 PST
AWS License Manager service default role policy
AWSMarketplaceFullAccess
AWS managed
0
None
2015-02-11 09:21 PST
2018-08-08 14:13 PST
Provides the ability to subscribe and unsubscribe to AWS Marketplace software, allows users to manage Marketplace software instances from the Marketplace 'Your Software' page, and provides administrative access to EC2.
AWSMarketplaceGetEntitlements
AWS managed
0
None
2017-03-27 12:37 PST
2017-03-27 12:37 PST
Provides read access to AWS Marketplace Entitlements
AWSMarketplaceImageBuildFullAccess
AWS managed
0
None
2018-07-31 16:29 PST
2018-08-08 14:11 PST
Provides full access to AWS Marketplace Private Image Build Feature. In addition to create private images, it also provides permissions to add tags to images, launch and terminate ec2 instances.
AWSMarketplaceManageSubscriptions
AWS managed
0
None
2015-02-06 10:40 PST
2019-10-28 14:49 PST
Provides the ability to subscribe and unsubscribe to AWS Marketplace software
AWSMarketplaceMeteringFullAccess
AWS managed
0
None
2016-03-17 15:39 PST
2016-03-17 15:39 PST
Provides full access to AWS Marketplace Metering.
AWSMarketplaceMeteringRegisterUsage
AWS managed
0
None
2019-11-20 17:17 PST
2019-11-20 17:17 PST
Provides permissions to register a resource and track usage through AWS Marketplace Metering Service.
AWSMarketplaceProcurementSystemAdminFullAccess
AWS managed
0
None
2019-06-25 06:07 PST
2019-06-25 06:07 PST
Provides full access to all administrative actions for an AWS Marketplace eProcurement integration.
AWSMarketplaceRead-only
AWS managed
0
None
2015-02-06 10:40 PST
2019-10-28 14:51 PST
Provides the ability to review AWS Marketplace subscriptions
AWSMarketplaceSellerFullAccess
AWS managed
0
None
2019-07-02 13:40 PST
2019-07-02 13:40 PST
Provides full access to all seller operations on the AWS Marketplace and other AWS services such as AMI management.
AWSMarketplaceSellerProductsFullAccess
AWS managed
0
None
2019-07-02 14:06 PST
2019-07-02 14:06 PST
Provides sellers full access to AWS Marketplace Management Products page and other AWS services such as AMI management.
AWSMarketplaceSellerProductsReadOnly
AWS managed
0
None
2019-07-02 14:40 PST
2019-07-02 14:40 PST
Provide sellers read-only access to AWS Marketplace Management Products page.
AWSMigrationHubDiscoveryAccess
AWS managed
0
None
2017-08-14 06:30 PST
2020-02-20 08:35 PST
Policy allows AWSMigrationHubService to call AWSApplicationDiscoveryService on behalf of the customer.
AWSMigrationHubDMSAccess
AWS managed
0
None
2017-08-14 07:00 PST
2019-10-07 10:51 PST
Policy for Database Migration Service to assume role in customer's account to call Migration Hub
AWSMigrationHubFullAccess
AWS managed
0
None
2017-08-14 07:02 PST
2019-06-19 14:14 PST
Managed policy to provide the customer access to the Migration Hub Service
AWSMigrationHubSMSAccess
AWS managed
0
None
2017-08-14 06:57 PST
2019-10-07 11:01 PST
Policy for Server Migration Service to assume role in customer's account to call Migration Hub
AWSMobileHub_FullAccess
AWS managed
0
None
2016-01-05 11:56 PST
2019-12-19 15:15 PST
This policy may be attached to any User, Role, or Group, in order to grant users permission to create, delete, and modify projects (and their associated AWS resources) in AWS Mobile Hub. This also includes permissions to generate and download sample mobile app source code for each Mobile Hub project.
AWSMobileHub_ReadOnly
AWS managed
0
None
2016-01-05 11:55 PST
2018-07-23 14:59 PST
This policy may be attached to any User, Role, or Group, in order to grant users permission to list and view projects in AWS Mobile Hub. This also includes permissions to generate and download sample mobile app source code for each Mobile Hub project. It does not allow the user to modify any configuration for any Mobile Hub project.
AWSNetworkManagerFullAccess
AWS managed
0
None
2019-12-03 09:37 PST
2019-12-03 09:37 PST
Provides full access to Amazon NetworkManager via the AWS Management Console.
AWSNetworkManagerReadOnlyAccess
AWS managed
0
None
2019-12-03 09:35 PST
2019-12-03 09:35 PST
Provides read only access to Amazon NetworkManager via the AWS Management Console.
AWSNetworkManagerServiceRolePolicy
AWS managed
0
None
2019-12-03 06:03 PST
2019-12-10 12:41 PST
Allow NetworkManager to access resources associated with your Global Networks
AWSOpsWorksCloudWatchLogs
AWS managed
0
None
2017-03-30 10:47 PST
2017-03-30 10:47 PST
Enables OpsWorks instances with the CWLogs integration enabled to ship logs and create required log groups
AWSOpsWorksCMInstanceProfileRole
AWS managed
0
None
2016-11-24 01:48 PST
2019-10-22 00:40 PST
Provides S3 access for instances launched by OpsWorks CM.
AWSOpsWorksCMServiceRole
AWS managed
0
None
2016-11-24 01:49 PST
2019-12-16 05:45 PST
Service Role Policy to be used for Creating OpsWorks CM servers.
AWSOpsWorksFullAccess
AWS managed
0
None
2015-02-06 10:40 PST
2015-02-06 10:40 PST
Provides full access to AWS OpsWorks.
AWSOpsWorksInstanceRegistration
AWS managed
0
None
2016-06-03 07:23 PST
2016-06-03 07:23 PST
Provides access for an Amazon EC2 instance to register with an AWS OpsWorks stack.
AWSOpsWorksRegisterCLI_EC2
AWS managed
0
None
2019-06-18 08:56 PST
2019-06-18 08:56 PST
Policy to enable registration of EC2 instances via the OpsWorks CLI
AWSOpsWorksRegisterCLI_OnPremises
AWS managed
0
None
2019-06-18 08:33 PST
2019-06-18 08:33 PST
Policy to enable registration of On-Premises instances via the OpsWorks CLI
AWSOpsWorksRole
AWS managed
0
None
2015-02-06 10:41 PST
2015-02-06 10:41 PST
Default policy for AWS OpsWorks service role.
AWSOrganizationsFullAccess
AWS managed
0
None
2018-11-06 12:31 PST
2018-11-06 12:31 PST
Provides full access to AWS Organizations.
AWSOrganizationsReadOnlyAccess
AWS managed
0
None
2018-11-06 12:32 PST
2018-11-06 12:32 PST
Provides read-only access to AWS Organizations.
AWSOrganizationsServiceTrustPolicy
AWS managed
1
Permissions policy (1)
2017-10-10 16:04 PST
2017-10-31 23:01 PST
A policy to allow AWS Organizations to share trust with other approved AWS Services for the purpose of simplifying customer configuration.
AWSPriceListServiceFullAccess
AWS managed
0
None
2017-11-21 16:36 PST
2017-11-21 16:36 PST
Provides full access to AWS Price List Service.
AWSPrivateMarketplaceAdminFullAccess
AWS managed
0
None
2018-11-27 08:32 PST
2019-10-28 14:48 PST
Provides full access to all administrative actions for an AWS Private Marketplace.
AWSPrivateMarketplaceRequests
AWS managed
0
None
2019-10-28 14:44 PST
2019-10-28 14:44 PST
Provides access to creating requests in an AWS Private Marketplace.
AWSQuicksightAthenaAccess
AWS managed
0
None
2016-12-08 18:31 PST
2019-09-10 10:59 PST
Quicksight access to Athena API and S3 buckets used for Athena query results
AWSQuickSightDescribeRDS
AWS managed
0
None
2015-11-10 15:24 PST
2015-11-10 15:24 PST
Allow QuickSight to describe the RDS resources
AWSQuickSightDescribeRedshift
AWS managed
0
None
2015-11-10 15:25 PST
2015-11-10 15:25 PST
Allow QuickSight to describe Redshift resources
AWSQuickSightIoTAnalyticsAccess
AWS managed
0
None
2017-11-29 09:00 PST
2017-11-29 09:00 PST
Give QuickSight read-only access to IoT Analytics datasets
AWSQuickSightListIAM
AWS managed
0
None
2015-11-10 15:25 PST
2015-11-10 15:25 PST
Allow QuickSight to list IAM entities
AWSQuickSightSageMakerPolicy
AWS managed
0
None
2020-01-17 09:18 PST
2020-01-17 09:18 PST
Provides access to Amazon SageMaker resources from Amazon QuickSight
AWSResourceAccessManagerFullAccess
AWS managed
0
None
2019-06-04 10:28 PST
2019-06-04 10:28 PST
Provides full access to AWS Resource Access Manager
AWSResourceAccessManagerReadOnlyAccess
AWS managed
0
None
2019-12-09 12:58 PST
2019-12-09 12:58 PST
Provides read only access to AWS Resource Access Manager.
AWSResourceAccessManagerResourceShareParticipantAccess
AWS managed
0
None
2019-12-09 12:41 PST
2019-12-09 12:41 PST
Provides access to AWS Resource Access Manager APIs needed by a resource share participant.
AWSResourceAccessManagerServiceRolePolicy
AWS managed
0
None
2018-11-14 11:28 PST
2018-11-14 11:28 PST
Policy containing Read-only AWS Resource Access Manager access to customers' Organizations structure. It also contains IAM permissions to self-delete the role.
AWSResourceGroupsReadOnlyAccess
AWS managed
0
None
2018-03-07 02:27 PST
2019-02-05 09:56 PST
This is the read only policy for AWS Resource Groups
AWSRoboMakerFullAccess
AWS managed
0
None
2018-11-25 21:28 PST
2018-11-25 21:28 PST
Provides full access to AWS RoboMaker via the AWS Management Console and SDK. Also provides select access to related services (e.g., S3, IAM).
AWSRoboMakerReadOnlyAccess
AWS managed
0
None
2018-11-25 21:30 PST
2018-11-25 21:30 PST
Provides read only access to AWS RoboMaker via the AWS Management Console and SDK
AWSRoboMakerServicePolicy
AWS managed
0
None
2018-11-25 22:30 PST
2020-02-04 11:33 PST
RoboMaker service policy
AWSRoboMakerServiceRolePolicy
AWS managed
0
None
2018-11-25 21:33 PST
2018-11-25 21:33 PST
RoboMaker service policy
AWSSavingsPlansFullAccess
AWS managed
0
None
2019-11-06 14:45 PST
2019-11-06 14:45 PST
Provides full access to Savings Plans service
AWSSavingsPlansReadOnlyAccess
AWS managed
0
None
2019-11-06 14:45 PST
2019-11-06 14:45 PST
Provides read only access to Savings Plans service
AWSSecurityHubFullAccess
AWS managed
0
None
2018-11-27 15:54 PST
2018-11-27 15:54 PST
Provides full access to use AWS Security Hub.
AWSSecurityHubReadOnlyAccess
AWS managed
0
None
2018-11-27 17:34 PST
2019-06-25 15:45 PST
Provides read only access to AWS Security Hub resources
AWSSecurityHubServiceRolePolicy
AWS managed
1
Permissions policy (1)
2018-11-27 15:47 PST
2020-02-05 13:38 PST
A service-linked role required for AWS Security Hub to access your resources.
AWSServiceCatalogAdminFullAccess
AWS managed
0
None
2018-02-15 09:19 PST
2019-02-05 17:57 PST
Provides full access to service catalog admin capabilities
AWSServiceCatalogAdminReadOnlyAccess
AWS managed
0
None
2019-10-25 11:53 PST
2019-10-25 11:53 PST
Provides read-only access to Service Catalog admin capabilities
AWSServiceCatalogEndUserFullAccess
AWS managed
0
None
2018-02-15 09:22 PST
2019-07-10 13:30 PST
Provides full access to service catalog enduser capabilities
AWSServiceCatalogEndUserReadOnlyAccess
AWS managed
0
None
2019-10-25 11:49 PST
2019-10-25 11:49 PST
Provides read-only access to Service Catalog end-user capabilities
AWSServiceRoleForAmazonEKSNodegroup
AWS managed
0
None
2019-11-06 17:34 PST
2020-02-21 12:40 PST
Permissions required for managing nodegroups in the customer's account. These policies related to management of the following resources: AutoscalingGroups, SecurityGroups, LaunchTemplates and InstanceProfiles.
AWSServiceRoleForEC2ScheduledInstances
AWS managed
0
None
2017-10-12 11:31 PST
2017-10-12 11:31 PST
Allows EC2 Scheduled Instances to launch and manage spot instances.
AWSServiceRoleForGammaInternalAmazonEKSNodegroup
AWS managed
0
None
2020-01-16 13:47 PST
2020-01-16 13:47 PST
Gamma Internal AWS Service Role for EKS Nodegroups
AWSServiceRoleForImageBuilder
AWS managed
0
None
2019-11-29 14:02 PST
2020-02-28 11:03 PST
Allows EC2ImageBuilder to call AWS services on your behalf.
AWSServiceRoleForIoTSiteWise
AWS managed
0
None
2018-11-14 11:19 PST
2019-11-21 13:52 PST
Allows AWS IoT SiteWise to provision and manage gateways as well as query data. The policy includes required AWS Greengrass permissions for deploying to groups, AWS Lambda permissions for creating and updating service-prefixed functions, and AWS IoT Analytics permissions for querying data from datastores.
AWSServiceRoleForLogDeliveryPolicy
AWS managed
0
None
2019-10-04 10:31 PST
2019-10-04 10:31 PST
Allows Log Delivery service to deliver logs by calling log destination on your behalf.
AWSServiceRoleForSMS
AWS managed
0
None
2019-08-06 11:39 PST
2019-12-23 15:18 PST
Provides access to AWS services and resources necessary to migrate service instances into AWS including EC2, S3 and Cloudformation.
AWSShieldDRTAccessPolicy
AWS managed
0
None
2018-06-05 15:29 PST
2019-02-11 09:08 PST
Provides the AWS DDoS Response Team with limited access to your AWS account to assist with DDoS attack mitigation during a high-severity event.
AWSSSODirectoryAdministrator
AWS managed
0
None
2018-10-31 16:54 PST
2018-10-31 16:54 PST
Administrator access for SSO Directory
AWSSSODirectoryReadOnly
AWS managed
0
None
2018-10-31 16:49 PST
2019-11-26 14:37 PST
ReadOnly access for SSO Directory
AWSSSOMasterAccountAdministrator
AWS managed
0
None
2018-06-27 13:36 PST
2018-10-17 13:41 PST
Provides access within AWS SSO to manage AWS Organizations master and member accounts and cloud application
AWSSSOMemberAccountAdministrator
AWS managed
0
None
2018-06-27 13:45 PST
2018-10-17 13:35 PST
Provides access within AWS SSO to manage AWS Organizations member accounts and cloud application
AWSSSOReadOnly
AWS managed
0
None
2018-06-27 13:24 PST
2019-10-24 08:45 PST
Provides read only access to AWS SSO configurations.
AWSSSOServiceRolePolicy
AWS managed
0
None
2017-12-05 10:36 PST
2019-08-30 12:55 PST
Grants AWS SSO permissions to manage AWS resources, including IAM roles, policies and SAML IdP on your behalf.
AWSStepFunctionsConsoleFullAccess
AWS managed
0
None
2017-01-11 13:54 PST
2017-01-11 16:19 PST
An access policy for providing a user/role/etc access to the AWS StepFunctions console. For a full console experience, in addition to this policy, a user may need iam:PassRole permission on other IAM roles that can be assumed by the service.
AWSStepFunctionsFullAccess
AWS managed
0
None
2017-01-11 13:51 PST
2017-01-11 13:51 PST
An access policy for providing a user/role/etc access to the AWS StepFunctions API. For full access, in addition to this policy, a user MUST have iam:PassRole permission on at least one IAM role that can be assumed by the service.
AWSStepFunctionsReadOnlyAccess
AWS managed
0
None
2017-01-11 13:46 PST
2017-11-10 14:03 PST
An access policy for providing a user/role/etc read only access to the AWS StepFunctions service.
AWSStorageGatewayFullAccess
AWS managed
0
None
2015-02-06 10:41 PST
2015-02-06 10:41 PST
Provides full access to AWS Storage Gateway via the AWS Management Console.
AWSStorageGatewayReadOnlyAccess
AWS managed
0
None
2015-02-06 10:41 PST
2015-02-06 10:41 PST
Provides access to AWS Storage Gateway via the AWS Management Console.
AWSSupportAccess
AWS managed
0
None
2015-02-06 10:41 PST
2015-02-06 10:41 PST
Allows users to access the AWS Support Center.
AWSSupportServiceRolePolicy
AWS managed
1
Permissions policy (1)
2018-04-19 11:04 PST
2019-12-16 11:39 PST
AWSSystemsManagerAccountDiscoveryServicePolicy
AWS managed
0
None
2019-10-24 10:21 PST
2019-10-24 10:21 PST
Grants AWS Systems Manager (SSM) permission to discover AWS account information.
AWSTransferLoggingAccess
AWS managed
0
None
2019-01-14 07:32 PST
2019-01-14 07:32 PST
Allows AWS Transfer full access to create log streams and groups and put log events to your account
AWSTrustedAdvisorReportingServiceRolePolicy
AWS managed
0
None
2019-11-19 09:41 PST
2019-11-19 09:41 PST
Service Policy for Trusted Advisor Multi-account Reporting
AWSTrustedAdvisorServiceRolePolicy
AWS managed
1
Permissions policy (1)
2018-02-22 13:24 PST
2019-11-15 14:11 PST
Access for the AWS Trusted Advisor Service to help reduce cost, increase performance, and improve security of your AWS environment.
AWSVPCS2SVpnServiceRolePolicy
AWS managed
0
None
2019-08-06 07:13 PST
2019-08-06 07:13 PST
Allow Site-to-Site VPN to create and manage resources related to your VPN Connections.
AWSVPCTransitGatewayServiceRolePolicy
AWS managed
0
None
2018-11-26 08:21 PST
2018-11-26 08:21 PST
Allow VPC Transit Gateway to create and manage necessary resources for your Transit Gateway VPC Attachments.
AWSWAFFullAccess
AWS managed
0
None
2015-10-06 13:44 PST
2020-01-07 12:50 PST
Provides full access to AWS WAF actions.
AWSWAFReadOnlyAccess
AWS managed
0
None
2015-10-06 13:43 PST
2020-01-07 11:27 PST
Provides read only access to AWS WAF actions.
AWSXRayDaemonWriteAccess
AWS managed
0
None
2018-08-28 16:00 PST
2018-08-28 16:00 PST
Allow the AWS X-Ray Daemon to relay raw trace segments data to the service's API and retrieve sampling data (rules, targets, etc.) to be used by the X-Ray SDK.
AWSXrayFullAccess
AWS managed
0
None
2016-12-01 10:30 PST
2016-12-01 10:30 PST
AWS X-Ray full access managed policy
AWSXrayReadOnlyAccess
AWS managed
0
None
2016-12-01 10:27 PST
2019-04-30 11:11 PST
AWS X-Ray read only managed policy
AWSXrayWriteOnlyAccess
AWS managed
0
None
2016-12-01 10:19 PST
2018-08-28 16:03 PST
AWS X-Ray write only managed policy
Billing
Job function
0
None
2016-11-10 09:33 PST
2018-02-06 15:46 PST
Grants permissions for billing and cost management. This includes viewing account usage and viewing and modifying budgets and payment methods.
ClientVPNServiceRolePolicy
AWS managed
0
None
2018-12-10 13:20 PST
2019-11-06 10:51 PST
Policy to enable AWS Client VPN to manage your Client VPN endpoints.
CloudFormationStackSetsOrgAdminServiceRolePolicy
AWS managed
0
None
2019-12-09 16:20 PST
2019-12-09 16:20 PST
Service Role for CloudFormation StackSets (Organization Master Account)
CloudFormationStackSetsOrgMemberServiceRolePolicy
AWS managed
0
None
2019-12-09 15:52 PST
2019-12-09 15:52 PST
Service Role for CloudFormation StackSets (Organization Member Account)
CloudFrontFullAccess
AWS managed
0
None
2015-02-06 10:39 PST
2020-02-19 11:52 PST
Provides full access to the CloudFront console plus the ability to list Amazon S3 buckets via the AWS Management Console.
CloudFrontReadOnlyAccess
AWS managed
0
None
2015-02-06 10:39 PST
2020-02-19 11:49 PST
Provides access to CloudFront distribution configuration information and list distributions via the AWS Management Console.
CloudHSMServiceRolePolicy
AWS managed
0
None
2017-11-06 11:12 PST
2017-11-06 11:12 PST
Enables access to AWS resources used or managed by CloudHSM
CloudSearchFullAccess
AWS managed
0
None
2015-02-06 10:39 PST
2015-02-06 10:39 PST
Provides full access to the Amazon CloudSearch configuration service.
CloudSearchReadOnlyAccess
AWS managed
0
None
2015-02-06 10:39 PST
2015-02-06 10:39 PST
Provides read only access to the Amazon CloudSearch configuration service.
CloudTrailServiceRolePolicy
AWS managed
0
None
2018-10-24 14:21 PST
2018-10-24 14:21 PST
Permission policy for CloudTrail ServiceLinkedRole
CloudWatch-CrossAccountAccess
AWS managed
0
None
2019-07-23 02:59 PST
2019-07-23 02:59 PST
Allows CloudWatch to assume CloudWatch-CrossAccountSharing roles in remote accounts on behalf of the current account in order to display data cross-account, cross-region
CloudWatchActionsEC2Access
AWS managed
0
None
2015-07-06 17:00 PST
2015-07-06 17:00 PST
Provides read-only access to CloudWatch alarms and metrics as well as EC2 metadata. Provides access to Stop, Terminate and Reboot EC2 instances.
CloudWatchAgentAdminPolicy
AWS managed
0
None
2018-03-06 16:52 PST
2018-03-06 16:52 PST
Full permissions required to use AmazonCloudWatchAgent.
CloudWatchAgentServerPolicy
AWS managed
0
None
2018-03-06 17:06 PST
2019-10-17 16:08 PST
Permissions required to use AmazonCloudWatchAgent on servers
CloudwatchApplicationInsightsServiceLinkedRolePolicy
AWS managed
0
None
2018-12-01 08:22 PST
2019-10-31 18:06 PST
Cloudwatch Application Insights Service Linked Role Policy
CloudWatchAutomaticDashboardsAccess
AWS managed
0
None
2019-07-23 03:01 PST
2019-11-20 04:58 PST
Provides access to the non-CloudWatch APIs used to display CloudWatch Automatic Dashboards, including the contents of objects such as Lambda functions
CloudWatchEventsBuiltInTargetExecutionAccess
AWS managed
0
None
2016-01-14 10:35 PST
2016-01-14 10:35 PST
Allows built-in targets in Amazon CloudWatch Events to perform EC2 actions on your behalf.
CloudWatchEventsFullAccess
AWS managed
0
None
2016-01-14 10:37 PST
2016-01-14 10:37 PST
Provides full access to Amazon CloudWatch Events.
CloudWatchEventsInvocationAccess
AWS managed
0
None
2016-01-14 10:36 PST
2016-01-14 10:36 PST
Allows Amazon CloudWatch Events to relay events to the streams in AWS Kinesis Streams in your account.
CloudWatchEventsReadOnlyAccess
AWS managed
0
None
2016-01-14 10:27 PST
2017-08-10 10:25 PST
Provides read only access to Amazon CloudWatch Events.
CloudWatchEventsServiceRolePolicy
AWS managed
0
None
2017-11-16 16:42 PST
2017-11-16 16:42 PST
Allow AWS CloudWatch to execute actions on your behalf configured through alarms and events.
CloudWatchFullAccess
AWS managed
0
None
2015-02-06 10:40 PST
2018-08-09 12:10 PST
Provides full access to CloudWatch.
CloudWatchLogsFullAccess
AWS managed
0
None
2015-02-06 10:40 PST
2015-02-06 10:40 PST
Provides full access to CloudWatch Logs
CloudWatchLogsReadOnlyAccess
AWS managed
0
None
2015-02-06 10:40 PST
2019-01-14 11:32 PST
Provides read only access to CloudWatch Logs
CloudWatchReadOnlyAccess
AWS managed
0
None
2015-02-06 10:40 PST
2018-05-10 14:40 PST
Provides read only access to CloudWatch.
CloudWatchSyntheticsFullAccess
AWS managed
0
None
2019-11-25 09:39 PST
2019-11-25 09:39 PST
Provides full access to CloudWatch Synthetics.
CloudWatchSyntheticsReadOnlyAccess
AWS managed
0
None
2019-11-25 09:45 PST
2019-11-25 09:45 PST
Provides read only access to CloudWatch Synthetics.
ComprehendDataAccessRolePolicy
AWS managed
0
None
2019-03-06 14:28 PST
2019-03-06 14:28 PST
Policy for AWS Comprehend service role which allows access to S3 resources for data access
ComprehendFullAccess
AWS managed
0
None
2017-11-29 10:08 PST
2017-12-04 17:36 PST
Provides full access to Amazon Comprehend.
ComprehendMedicalFullAccess
AWS managed
0
None
2018-11-27 09:55 PST
2018-11-27 09:55 PST
Provides full access to Amazon Comprehend Medical
ComprehendReadOnly
AWS managed
0
None
2017-11-29 10:10 PST
2019-11-25 11:35 PST
Provides read-only access to Amazon Comprehend.
ComputeOptimizerServiceRolePolicy
AWS managed
0
None
2019-12-03 00:45 PST
2019-12-03 00:45 PST
Allows ComputeOptimizer to call AWS services and collect workload details on your behalf.
ConfigConformsServiceRolePolicy
AWS managed
0
None
2019-07-25 14:38 PST
2019-11-13 10:29 PST
Policy needed for AWSConfig to create conformance packs
DatabaseAdministrator
Job function
0
None
2016-11-10 09:25 PST
2019-01-07 16:48 PST
Grants full access permissions to AWS services and actions required to set up and configure AWS database services.
DataScientist
Job function
0
None
2016-11-10 09:28 PST
2019-12-03 08:48 PST
Grants permissions to AWS data analytics services.
DAXServiceRolePolicy
AWS managed
0
None
2018-03-05 09:51 PST
2018-03-05 09:51 PST
This policy allows DAX to create and manage Network interface, Security group, Subnet and Vpc on behalf of customer
DynamoDBCloudWatchContributorInsightsServiceRolePolicy
AWS managed
0
None
2019-11-15 13:13 PST
2019-11-15 13:13 PST
Permissions required to support Amazon CloudWatch Contributor Insights for Amazon DynamoDB.
DynamoDBReplicationServiceRolePolicy
AWS managed
0
None
2017-11-09 15:55 PST
2020-01-22 14:55 PST
Permissions required by DynamoDB for cross-region data replication
EC2FleetTimeShiftableServiceRolePolicy
AWS managed
0
None
2019-12-23 11:47 PST
2019-12-23 11:47 PST
Policy granting permissions to EC2 Fleet to launch instances in the future.
EC2InstanceConnect
AWS managed
0
None
2019-06-27 11:53 PST
2019-06-27 11:53 PST
Allows customers to call EC2 Instance Connect to publish ephemeral keys to their EC2 instances and connect via ssh or the EC2 Instance Connect CLI.
EC2InstanceProfileForImageBuilder
AWS managed
0
None
2019-12-01 11:08 PST
2019-12-01 11:08 PST
EC2 Instance profile for Image Builder service.
ElastiCacheServiceRolePolicy
AWS managed
0
None
2017-12-07 09:50 PST
2020-02-06 13:27 PST
This policy allows ElastiCache to manage AWS resources on your behalf as necessary for managing your cache
ElasticLoadBalancingFullAccess
AWS managed
0
None
2018-09-20 13:42 PST
2019-03-25 14:33 PST
Provides full access to Amazon ElasticLoadBalancing, and limited access to other services necessary to provide ElasticLoadBalancing features.
ElasticLoadBalancingReadOnly
AWS managed
0
None
2018-09-20 13:17 PST
2018-09-20 13:17 PST
Provides read only access to Amazon ElasticLoadBalancing and dependent services
ElementalAppliancesSoftwareFullAccess
AWS managed
0
None
2019-07-31 09:28 PST
2019-12-02 10:50 PST
Allow AWS user to use the aesop console to manage quotes
FMSServiceRolePolicy
AWS managed
0
None
2018-03-28 16:01 PST
2019-08-14 14:35 PST
Access policy to allow FM service linked role to perform FM-related actions on FM-managed resources within a customer AWS Organization account.
FSxDeleteServiceLinkedRoleAccess
AWS managed
0
None
2018-11-28 02:40 PST
2018-11-28 02:40 PST
Allows Amazon FSx to delete its Service Linked Roles for Amazon S3 access
GlobalAcceleratorFullAccess
AWS managed
0
None
2018-11-26 18:44 PST
2019-10-21 14:25 PST
Allow GlobalAccelerator Users full Access to all APIs
GlobalAcceleratorReadOnlyAccess
AWS managed
0
None
2018-11-26 18:41 PST
2018-11-26 18:41 PST
Allow GlobalAccelerator Users Access to Read Only APIs
GreengrassOTAUpdateArtifactAccess
AWS managed
0
None
2017-11-29 10:11 PST
2018-12-17 16:59 PST
Provides read access to the Greengrass OTA Update artifacts in all Greengrass regions
Health_OrganizationsServiceRolePolicy
AWS managed
0
None
2019-12-16 05:28 PST
2019-12-16 05:28 PST
AWS Health policy to enable Organizational View feature
IAMAccessAdvisorReadOnly
AWS managed
0
None
2019-06-21 12:33 PST
2019-06-21 12:33 PST
This policy grants access to read all access information provided by IAM access advisor such as service last accessed information.
IAMAccessAnalyzerFullAccess
AWS managed
0
None
2019-12-02 09:12 PST
2019-12-02 09:12 PST
Provides full access to IAM Access Analyzer
IAMAccessAnalyzerReadOnlyAccess
AWS managed
0
None
2019-12-02 09:12 PST
2019-12-02 09:12 PST
Provides read only access to IAM Access Analyzer resources
IAMFullAccess
AWS managed
0
None
2015-02-06 10:40 PST
2019-06-21 12:40 PST
Provides full access to IAM via the AWS Management Console.
IAMReadOnlyAccess
AWS managed
0
None
2015-02-06 10:40 PST
2018-01-25 11:11 PST
Provides read only access to IAM via the AWS Management Console.
IAMSelfManageServiceSpecificCredentials
AWS managed
0
None
2016-12-22 09:25 PST
2016-12-22 09:25 PST
Allows an IAM user to manage their own Service Specific Credentials.
IAMUserChangePassword
AWS managed
0
None
2016-11-14 16:25 PST
2016-11-15 15:18 PST
Provides the ability for an IAM user to change their own password.
IAMUserSSHKeys
AWS managed
0
None
2015-07-09 10:08 PST
2015-07-09 10:08 PST
Provides the ability for an IAM user to manage their own SSH keys.
KafkaServiceRolePolicy
AWS managed
0
None
2018-11-15 15:31 PST
2019-05-23 12:58 PST
IAM service linked role policy for Kafka.
LakeFormationDataAccessServiceRolePolicy
AWS managed
0
None
2019-06-20 13:46 PST
2019-06-20 13:46 PST
Policy to grant temporary data access to Lake Formation resources
LexBotPolicy
AWS managed
0
None
2017-02-17 14:18 PST
2019-11-13 14:29 PST
Policy for AWS Lex Bot use case
LexChannelPolicy
AWS managed
0
None
2017-02-17 15:23 PST
2017-02-17 15:23 PST
Policy for AWS Lex Channel use case
LightsailExportAccess
AWS managed
0
None
2018-09-28 09:35 PST
2018-09-28 09:35 PST
AWS Lightsail service linked role policy which grants permissions to export resources
MigrationHubDMSAccessServiceRolePolicy
AWS managed
0
None
2019-06-12 10:50 PST
2019-10-07 10:57 PST
Policy for Database Migration Service to assume role in customer's account to call Migration Hub
MigrationHubServiceRolePolicy
AWS managed
0
None
2019-06-12 10:22 PST
2020-02-20 08:59 PST
Allows Migration Hub to call Application Discovery Service on your behalf
MigrationHubSMSAccessServiceRolePolicy
AWS managed
0
None
2019-06-12 11:30 PST
2019-10-07 11:02 PST
Policy for Server Migration Service to assume role in customer's account to call Migration Hub
NeptuneConsoleFullAccess
AWS managed
0
None
2018-06-19 14:35 PST
2020-01-23 12:49 PST
Provides full access to manage Amazon Neptune using the AWS Console. Note this policy also grants full access to publish on all SNS topics within the account, permissions to create and edit Amazon EC2 instances and VPC configurations, permissions to view and list keys on Amazon KMS, and full access to Amazon RDS. For more information, see https://aws.amazon.com/neptune/faqs/.
NeptuneFullAccess
AWS managed
0
None
2018-05-30 12:17 PST
2020-02-12 15:28 PST
Provides full access to Amazon Neptune. Note this policy also grants full access to publish on all SNS topics within the account and full access to Amazon RDS. For more information, see https://aws.amazon.com/neptune/faqs/.
NeptuneReadOnlyAccess
AWS managed
0
None
2018-05-30 12:16 PST
2018-05-30 12:16 PST
Provides read only access to Amazon Neptune. Note that this policy also grants access to Amazon RDS resources. For more information, see https://aws.amazon.com/neptune/faqs/.
NetworkAdministrator
Job function
0
None
2016-11-10 09:31 PST
2020-01-15 16:49 PST
Grants full access permissions to AWS services and actions required to set up and configure AWS network resources.
PowerUserAccess
Job function
0
None
2015-02-06 10:39 PST
2019-03-20 15:19 PST
Provides full access to AWS services and resources, but does not allow management of Users and groups.
QuickSightAccessForS3StorageManagementAnalyticsReadOnly
AWS managed
0
None
2017-06-12 11:18 PST
2019-10-08 16:53 PST
Policy used by QuickSight team to access customer data produced by S3 Storage Management Analytics.
RDSCloudHsmAuthorizationRole
AWS managed
0
None
2015-02-06 10:41 PST
2019-09-26 15:14 PST
Default policy for the Amazon RDS service role.
ReadOnlyAccess
AWS managed
0
None
2015-02-06 10:39 PST
2020-02-06 15:35 PST
Provides read-only access to AWS services and resources.
ResourceGroupsandTagEditorFullAccess
AWS managed
0
None
2015-02-06 10:39 PST
2019-10-02 16:57 PST
Provides full access to Resource Groups and Tag Editor.
ResourceGroupsandTagEditorReadOnlyAccess
AWS managed
0
None
2015-02-06 10:39 PST
2019-03-07 11:43 PST
Provides access to use Resource Groups and Tag Editor, but does not allow editing of tags via the Tag Editor.
SecretsManagerReadWrite
AWS managed
0
None
2018-04-04 11:05 PST
2018-05-03 13:02 PST
Provides read/write access to AWS Secrets Manager via the AWS Management Console. Note: this exludes IAM actions, so combine with IAMFullAccess if rotation configuration is required.
SecurityAudit
Job function
0
None
2015-02-06 10:41 PST
2020-02-25 08:08 PST
The security audit template grants access to read security configuration metadata. It is useful for software that audits the configuration of an AWS account.
ServerMigrationConnector
AWS managed
0
None
2016-10-24 14:45 PST
2016-10-24 14:45 PST
Permissions to allow the AWS Server Migration Connector to migrate VMs to EC2. Allows communication with the AWS Server Migration Service, read/write access to S3 buckets starting with 'sms-b-' and 'import-to-ec2-' as well as the buckets used for AWS Server Migration Connector upgrade, AWS Server Migration Connector registration with AWS, and metrics upload to AWS.
ServerMigrationServiceLaunchRole
AWS managed
0
None
2018-11-26 11:53 PST
2018-11-26 11:53 PST
Permissions to allow the AWS Server Migration Service to create and update relevant AWS resources into the customer's AWS account for launching migrated servers and applications.
ServerMigrationServiceRole
AWS managed
0
None
2016-10-24 14:19 PST
2019-12-23 15:27 PST
Permissions to allow the AWS Server Migration Service to migrate VMs to EC2: allows the Server Migration Service to place the migrated resources into the customer's EC2 account.
ServiceQuotasFullAccess
AWS managed
0
None
2019-06-24 08:44 PST
2019-06-24 08:44 PST
Provides full access to Service Quotas
ServiceQuotasReadOnlyAccess
AWS managed
0
None
2019-06-24 08:31 PST
2019-06-24 08:31 PST
Provides read only access to Service Quotas
ServiceQuotasServiceRolePolicy
AWS managed
0
None
2019-05-22 13:44 PST
2019-06-24 07:52 PST
Allows Service Quotas to create support cases on your behalf
SimpleWorkflowFullAccess
AWS managed
0
None
2015-02-06 10:41 PST
2015-02-06 10:41 PST
Provides full access to the Simple Workflow configuration service.
SupportUser
Job function
0
None
2016-11-10 09:21 PST
2017-05-17 16:11 PST
This policy grants permissions to troubleshoot and resolve issues in an AWS account. This policy also enables the user to contact AWS support to create and manage cases.
SystemAdministrator
Job function
0
None
2016-11-10 09:23 PST
2019-06-18 16:13 PST
Grants full access permissions necessary for resources required for application and development operations.
TagPoliciesServiceRolePolicy
AWS managed
0
None
2018-10-26 13:02 PST
2019-05-10 14:38 PST
TagPolicies Policy to allow Organizations integration.
TranslateFullAccess
AWS managed
0
None
2018-11-27 15:36 PST
2020-01-08 13:22 PST
Provides full access to Amazon Translate.
TranslateReadOnly
AWS managed
0
None
2017-11-29 10:22 PST
2020-01-08 13:13 PST
Provides read-only access to Amazon Translate.
ViewOnlyAccess
Job function
0
None
2016-11-10 09:20 PST
2020-01-16 09:42 PST
This policy grants permissions to view resources and basic metadata across all AWS services.
VMImportExportRoleForAWSConnector
AWS managed
0
None
2015-09-03 13:48 PST
2015-09-03 13:48 PST
Default policy for the VM Import/Export service role, for customers using the AWS Connector. The VM Import/Export service assumes a role with this policy to fulfill virtual machine migration requests from the AWS Connector virtual appliance. (Note that the AWS Connector uses the "AWSConnector" managed policy to issue requests on the customer's behalf to the VM Import/Export service.) Provides the ability to create AMIs and EBS snapshots, modify EBS snapshot attributes, make "Describe*" calls on EC2 objects, and read from S3 buckets starting with 'import-to-ec2-'.
WAFLoggingServiceRolePolicy
AWS managed
0
None
2018-08-24 14:05 PST
2018-08-24 14:05 PST
Creating SLR to write customer's logs to a firehose stream
WAFRegionalLoggingServiceRolePolicy
AWS managed
0
None
2018-08-24 11:40 PST
2018-08-24 11:40 PST
Creating SLR to write customer's logs to a firehose stream
WAFV2LoggingServiceRolePolicy
AWS managed
0
None
2019-11-06 16:40 PST
2019-11-06 16:40 PST
This policy creates a service-linked role that allows AWS WAF to write logs to Amazon Kinesis Data Firehose.
WellArchitectedConsoleFullAccess
AWS managed
0
None
2018-11-29 10:19 PST
2018-11-29 10:19 PST
Provides full access to AWS Well-Architected Tool via the AWS Management Console
WellArchitectedConsoleReadOnlyAccess
AWS managed
0
None
2018-11-29 10:21 PST
2018-11-29 10:21 PST
Provides read-only access to AWS Well-Architected Tool via the AWS Management Console
WorkLinkServiceRolePolicy
AWS managed
0
None
2019-01-23 11:03 PST
2019-01-23 11:03 PST
Enables access to AWS Services and Resources used or managed by Amazon WorkLink
No results